Purmemo Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Purmemo Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Memory for your AI tools. Claude remembers who you are, what you're working on, and what you said last time — across every session, on every platform.
Just want it in ChatGPT or Claude.ai in your browser? Get the Chrome Extension instead.
Mac or Linux:
curl -fsSL https://app.purmemo.ai/install | shWindows (PowerShell):
irm https://app.purmemo.ai/install.ps1 | iexThat's it for installing. The script handles everything — it'll install Node if you don't have it, set up the purmemo command, and tell you when it's done.
purmemopurmemoYour browser opens. Sign in (or create a free account). Close the tab when it says you're done.
Quit and reopen Claude Desktop (or Claude Code). pūrmemo is now connected.
You'll know it worked when your next Claude session opens with a header like:
pūrmemo v15.7.20 · [email protected] · Free · 0 memoriesTry saying "save this" at the end of a conversation, or "what was I working on?" at the start of a new one.
`purmemo` command not found? Close and reopen your terminal, then try again. New commands sometimes need a fresh shell.
You see "Failed to read token" or "bad decrypt"? Run:
purmemo --update && purmemo initThis clears any stale credentials and signs you back in. (Fixed in v15.7.20+ — if you're on an older version, this is a one-time thing.)
Anything else? Open an issue at github.com/purmemo-ai/purmemo-mcp/issues — we read every one.
what_changed about a person, project, or thing and get its dated history: what used to be true, what replaced it, and when.Three slash commands you'll use most:
| You type | What happens |
|---|---|
/save | Saves this conversation. Use the same title later → updates the same memory. |
/recall <topic> | Search your memories in plain English. |
/context | At the start of a session — loads who you are and what you were last working on. |
<details> <summary><b>I already have Node.js</b></summary>
npm install -g purmemo-mcp && purmemoOr, run it once without installing globally:
npx purmemo-mcp@latest init</details>
<details> <summary><b>Claude Desktop — hosted (recommended, no setup)</b></summary>
Open Claude Desktop → Settings → Developer → Edit Config and add:
{
"mcpServers": {
"purmemo": {
"url": "https://mcp.purmemo.ai/mcp/messages",
"transport": "streamable-http"
}
}
}Restart Claude Desktop. You'll be prompted to sign in via OAuth on first use.
</details>
<details> <summary><b>Claude Desktop — local (advanced)</b></summary>
Get your API key from app.purmemo.ai → Settings → API Keys, then edit:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"purmemo": {
"command": "npx",
"args": ["-y", "purmemo-mcp"],
"env": { "PURMEMO_API_KEY": "your-api-key-here" }
}
}
}Restart Claude Desktop after saving.
</details>
<details> <summary><b>Cursor / Windsurf / Zed</b></summary>
Cursor — edit ~/.cursor/mcp.json:
{ "mcpServers": { "purmemo": { "command": "npx", "args": ["-y", "purmemo-mcp"], "env": { "PURMEMO_API_KEY": "your-api-key" } } } }Windsurf — edit ~/.codeium/windsurf/mcp_config.json (same shape as above).
Zed — edit ~/.config/zed/settings.json, add under context_servers:
{ "context_servers": { "purmemo": { "command": { "path": "npx", "args": ["-y", "purmemo-mcp"], "env": { "PURMEMO_API_KEY": "your-api-key" } } } } }</details>
| Plan | Price | Recalls | Saves |
|---|---|---|---|
| Free | $0 | 50/month | Unlimited |
| Pro | $19/month | Unlimited | Unlimited |
Looking for the technical stuff? It's all here:
save_conversation, recall_memories, get_memory_details, what_changed, get_user_context. A short list helps the assistant pick the right tool. Env flags add more:PURMEMO_SESSIONS_BETA=1 — adds search_past_sessions (beta): searches the raw transcripts of your past AI sessions for what was actually said or decided. Served by purmemo-next at PURMEMO_READ_BASE_URL, else PURMEMO_SESSIONS_URL, else https://next.purmemo.ai.PURMEMO_ADMIN=1 — adds the admin tools (get_acknowledged_errors, save_investigation_result, get_investigations).PURMEMO_LEGACY_TOOLS=1 — brings back the paused tools (save_artifact, commit, the snapshot tools, list_clusters, discover_related_conversations, run_workflow, list_workflows, sharing, tasks, test results and the rest). Called while paused, they answer with what to use instead.purmemo-mcp-setup add). The server still starts on your active account, and that stays the default for every call, hook and auto-capture. When two or more accounts are signed in locally, the core tools gain an optional account argument (a choice among those signed-in accounts only; anything else is refused before any network call) and transfer_memory is listed, which moves one memory between your accounts. Calls on a non-default account are labelled with the account and logged, without content or keys, to ~/.purmemo/account-audit.jsonl. Programs use the same boundary through purmemo-ops (accounts, whoami, save, recall, transfer), which always requires an explicit account. Hosted (remote) mode never offers it; PURMEMO_MULTI_ACCOUNT=0 turns it off. See ADR-040.mode='append' vs mode='replace', chunking behavior, ADR-036/038 details.The MCP connector code in this repo is MIT licensed. The pūrmemo platform, API, and backend are proprietary.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.