Copilot Memory Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Copilot Memory Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Give GitHub Copilot CLI (or any MCP-compatible agent) persistent memory across sessions.
Without this, Copilot CLI starts every session as a blank slate. With this MCP server running, it can save and recall knowledge — learning from experience just like you do.
| Tool | Description |
|---|---|
save_memory | Store a new piece of knowledge with category and tags |
recall_memories | Search or browse past memories (full-text search) |
update_memory | Update an existing memory when things change |
forget_memory | Delete a memory that's no longer relevant |
memory_stats | See what's in the knowledge base |
These solve the "Copilot stops and asks should I continue?" problem. Each tool runs a long-running polling loop internally, so Copilot uses one tool call instead of burning through its iteration limit.
| Tool | Description |
|---|---|
monitor_command | Run a command repeatedly, collect output, stop on pattern/change/exit code |
watch_file | Watch a file for changes or a regex pattern match |
poll_url | Poll a URL until expected HTTP status or body pattern |
run_long_command | Run a single long command, stream output, stop on pattern |
git clone <this-repo> ~/projects/copilot-memory-mcp
cd ~/projects/copilot-memory-mcp
uv syncOr if you don't have uv:
cd ~/projects/copilot-memory-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install "mcp[cli]>=1.20"# Quick test — should print tool list
uv run mcp dev server.pyThis opens the MCP Inspector in your browser where you can test the tools interactively.
Edit (or create) your Copilot MCP config file:
Linux/macOS:
mkdir -p ~/.config/github-copilot
nano ~/.config/github-copilot/mcp.jsonWindows:
%LOCALAPPDATA%\github-copilot\mcp.jsonAdd this content:
{
"mcpServers": {
"copilot-memory": {
"command": "uv",
"args": ["run", "--directory", "/FULL/PATH/TO/copilot-memory-mcp", "server.py"],
"env": {}
}
}
}Important: Replace /FULL/PATH/TO/copilot-memory-mcp with the actual absolute path.
If you don't have uv, use the venv Python directly:
{
"mcpServers": {
"copilot-memory": {
"command": "/FULL/PATH/TO/copilot-memory-mcp/.venv/bin/python",
"args": ["/FULL/PATH/TO/copilot-memory-mcp/server.py"],
"env": {}
}
}
}Copy the included template to your global Copilot instructions so it knows to USE the memory:
mkdir -p ~/.github
cp copilot-instructions-template.md ~/.github/copilot-instructions.mdOr for a specific repo:
cp copilot-instructions-template.md YOUR_REPO/.github/copilot-instructions.mdStart Copilot CLI normally. It will now have access to memory tools. The instructions file tells it to check memory at session start and save important learnings.
$ copilot
> Hey, can you check what you remember about this project?
# Copilot calls recall_memories() automatically
# and loads any past contextSession 1:
You: "Always use pytest, never unittest"
Copilot saves: {category: "preference", content: "User prefers pytest over unittest"}
Session 2:
Copilot starts → calls recall_memories() → loads preference
Copilot: "I'll set up the tests with pytest as you prefer."
You debug a tricky async issue together
Copilot saves: {category: "fix", content: "asyncio.gather swallows exceptions — use return_exceptions=True"}
Session 3:
Copilot starts → recalls all memories → knows your preferences AND past fixes
You hit a similar async bug
Copilot: "This looks like the asyncio.gather issue we fixed before — need return_exceptions=True"Each session makes the next one smarter.
The monitoring tools solve Copilot CLI's biggest limitation: it stops and asks for confirmation during long-running tasks. These tools do the looping internally.
You: "Deploy the new version and monitor until all pods are running"
Copilot runs:
monitor_command(
command="kubectl get pods -l app=myapp",
interval_seconds=10,
timeout_seconds=300,
stop_pattern="1/1.*Running"
)
→ Tool polls every 10s for up to 5 minutes
→ Returns all snapshots when pods are Running
→ ONE tool call, no iteration limit hitYou: "Start the build and tell me when it's done"
Copilot runs:
run_long_command(
command="npm run build 2>&1",
timeout_seconds=300,
stop_pattern="Build complete|ERROR"
)
→ Captures the entire build output
→ Returns immediately when it sees success or failureYou: "Deploy and let me know when the health check passes"
Copilot runs:
poll_url(
url="http://localhost:8080/health",
expected_status=200,
expected_body_pattern="healthy",
interval_seconds=5,
timeout_seconds=120
)
→ Polls every 5s until 200 + "healthy" in body
→ Reports back with timing and response detailsDefault max is 1 hour (3600 seconds). Override with env var:
{
"mcpServers": {
"copilot-memory": {
"command": "uv",
"args": ["run", "--directory", "/path/to/copilot-memory-mcp", "server.py"],
"env": {
"COPILOT_MEMORY_MAX_MONITOR": "7200"
}
}
}
}By default, memories are stored in ~/.copilot-memory/memory.db. Override with:
{
"mcpServers": {
"copilot-memory": {
"command": "uv",
"args": ["run", "--directory", "/path/to/copilot-memory-mcp", "server.py"],
"env": {
"COPILOT_MEMORY_DB": "/custom/path/to/memory.db"
}
}
}
}uv run server.py --transport sseThis starts an HTTP server (default port 8000) for clients that prefer SSE over stdio.
This isn't Copilot-specific. Any MCP client can use it:
.mcp.json in your projectconfig.yaml under mcp.servers.mcp.json in project root):{
"mcpServers": {
"memory": {
"command": "uv",
"args": ["run", "--directory", "/path/to/copilot-memory-mcp", "server.py"]
}
}
}copilot-memory-mcp/
├── server.py # The MCP server (all-in-one)
├── copilot-instructions-template.md # Template to tell Copilot to use memory
├── pyproject.toml # Python project config
├── uv.lock # Dependency lock file
└── README.md # You're reading itMIT — do whatever you want with it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.