Configure Memory
REMOTE · MCP.CONFIGURE.DEV
Bring your saved preferences, project decisions, and useful context into your next AI conversation.
Available components
Last scanned (1 hour ago)
Scores higher than 99% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Memory and Knowledge
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability74
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 5647 tokens (~564/item across 10 items; 9 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
- Stability: 0.97 → pass security
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 0
- Resource “configure_connect” now points somewhere else: ui://configure/connect/v8.html → ui://configure/connect/v9.html security
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
- 22 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Tool “configure_profile_remember_many” rewrote its description, which is the text the model reads security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.configure.dev/
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.configure.dev | CN=YE1,O=Let's Encrypt,C=US | 18 Oct 2026 | 16 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 5e3c4820d85cc0057d199b7ab74c6f213ed |
| SANs: *.configure.dev, configure.dev | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.configure.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| configure.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://mcp.configure.dev/.well-known/oauth-protected-resource", scope="profile.read profile.search profile.remember profile.commit", error="invalid_token", error_description="Configure MCP requires OAuth authorization before calling profile tools.", configure_connection_token="no OAuth? use a connection token: Authorization: Bearer cfg_agt_... (or the URL form https://mcp.configure.dev/u/TOKEN) minted from the sign-in page"
Bearer resource_metadata="https://mcp.configure.dev/.well-known/oauth-protected-resource", scope="profile.read profile.search profile.remember profile.commit", error="invalid_token", error_description="Configure MCP requires OAuth authorization before calling profile tools.", configure_connection_token="no OAuth? use a connection token: Authorization: Bearer cfg_agt_... (or the URL form https://mcp.configure.dev/u/TOKEN) minted from the sign-in page" | Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
Protected resource metadata
| Document | https://mcp.configure.dev/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://mcp.configure.dev |
| Authorisation server | https://mcp.configure.dev |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.configure.dev/ | Verified | 200 | |
| http (plaintext) | http://mcp.configure.dev/ | HTTPS enforced | 301 | https://mcp.configure.dev/ |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
configure_connect ~576
Mints the Configure link that fixes access for the current user — sign-in, app connect, or permission grant. This is the tool for two situations: a Configure tool result says authorization_required (the user is not signed in), or the user asks to sign in or connect an app. The user's data exists behind sign-in, so "I have nothing on you" would be inaccurate in that state; what serves the user is knowing sign-in is the blocker and having the returned link, on its own line where it is easy to click. Retrying the failed call returns the same result until the user has signed in. Links exist only as this tool mints them — a hand-built link fails — and when a tool result already carries a link, that link is the one the user needs (minting another creates a second, competing session). Not the first call of a conversation (that is configure_profile_read), and not the fix for error -32009 (that is configure_profile_commit). For a signed-in user: app (gmail, calendar, drive, notion, sheets) connects or reconnects that app — returns status connect_app, a link, and whether it is already connected — and capability (like gmail:send) covers a single missing permission (status permission_needed). Bringing memories in from another assistant is NOT a connect action: this tool does not do it, and a bare "connect Configure" from a signed-in user needs no argument at all — omit app unless the user names a specific app to connect. Configure derives the requester from authenticated agent metadata or MCP transport metadata; the client field is a legacy fallback hint for an unauthenticated headless client only.
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | – | Optional app to connect or reconnect for an already signed-in user. This is for third-party apps only; it does not bring memories in from other assistants (that is not a connect action — see configur… |
| capability | string | – | Optional specific permission to request when the user has an app connected but not this capability (the profile read's integrations map shows which capabilities each connector has). For example, when… |
| client | string | – | Legacy fallback handle for an unauthenticated headless client whose transport supplies no identity. Never overrides an authenticated agent. |
| client_name | string | – | Legacy display hint for an unauthenticated headless client. Never overrides registered agent metadata. |
| purpose | string | – | Optional one-line reason shown to the user on the permission page, such as "so I can send the follow-ups you approve". Used with capability. |
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | – | – |
| capability | string | – | – |
| connect_url | string | – | Server-minted link where the user acts. Minted per session: only this exact URL works; a retyped or shortened one fails. |
| connected | boolean | – | – |
| instructions | string | – | – |
| status | string | yes | connect_app, authorization_required, session_probe_required, or permission_needed. |
No examples provided.
configure_profile_commit ~401
Close out a Configure-profile-backed turn by submitting bounded turn evidence and, optionally, durable memories worth keeping. Error -32009 (commit_required) from any configure tool is resolved ONLY by this call: commit, then retry the blocked call — never configure_connect, which is for sign-in. Call it at turn end even when you learned nothing durable: reads and searches created obligations regardless, and an empty commit with a one-line summary clears them. The runtime usually calls this for you after a profile read; call it yourself only when your host requires manual write-back. Prefer configure_profile_remember for a single fact the user explicitly stated; use commit to clear the obligation created by a configure_profile_read or configure_profile_search and to save memories drawn from the whole turn. Evidence is minimal: at most the specific user statements that support each memory, plus toolResults — never conversation history; memories are durable user facts, preferences, or intentions rather than provenance or assistant replies. Returns the obligations it cleared and any memories written (id, source, marker). Additive: it only records what this turn learned. It never deletes or overwrites existing memories, and never emails, posts, or publishes anything on the user's behalf.
| Name | Type | Req | Description |
|---|---|---|---|
| memories | array | – | Optional durable memory candidates to save, one clear fact per entry. Only include durable user facts, preferences, or intentions; do not summarize provenance, the conversation, or assistant replies. |
| messages | array | – | Optional minimal evidence to clear read-backed commit obligations: at most the one or two user statements that directly support each saved memory. Never send conversation history or any messages beyo… |
| read_id | string | – | Optional read id returned by a prior configure_profile_read or configure_profile_search obligation; pass it to tie this commit to that specific read. |
| toolResults | array | – | Optional bounded tool result evidence, each with toolName and content, used as evidence to clear read-backed commit obligations. |
| Name | Type | Req | Description |
|---|---|---|---|
| committed | boolean | – | – |
| error | string | – | – |
| memories | array | – | – |
| obligations | array | – | Read obligations this commit cleared. |
No examples provided.
configure_profile_forget ~727
Delete the user's memories that YOU saved or imported. WHICH to delete: if you hold an id, pass id ("mem_..."); if you do NOT have an id and the user names a topic, pass match with a word the memory contains (match: "nursing") and forget finds and deletes your matching memories itself, no search first. HOW: pass reason "user_request" whenever the user wants it gone for good or says never mention it again (this suppresses the content from re-saving and re-importing); use the default correction only for fixing your own mistake. A match previews first: it returns a count and the matching memories and deletes NOTHING until you call again with confirm: true, so review and confirm only what the user meant. import_id (from configure_profile_import) retracts one whole import; scope ("imports", "saved", "all") clears everything of yours at once. Pass exactly one selector. Reach is your own writes only: never another agent's memories, never an import the user ran themselves, never the profile's settled facts, and this deletes memories only, never the Configure account. An id outside your reach returns a clean not-found, not an error. Deletion is permanent for your copy. Returns the deleted memory id and which source it lived under.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Only with match. Omit or false to preview (count + the memories that match, deletes nothing). Set true to delete the matched memories. Preview first unless the user was unambiguous. |
| date | string | – | Optional. The memory's date ("YYYY-MM-DD") if known, from the saved path or entry; providing it makes the delete a direct lookup instead of a namespace scan. |
| id | string | – | One memory to delete, by the id returned when it was saved (format "mem_...", also shown on entries in your own source box). Use exactly one selector: id, import_id, or scope. |
| import_id | string | – | Optional, and used instead of id. The import_id returned by configure_profile_import: retracts every memory that import created, in one call, instead of one delete per memory. Only entries from an im… |
| match | string | – | Selector. Words a memory contains, e.g. "nursing" or "coffee". Finds YOUR OWN matching memories and deletes them, so you do not need a separate search to get ids first. A match WITHOUT confirm:true r… |
| reason | string | – | Optional, default "correction". Use "user_request" ONLY when the user explicitly asked you to remove this and not bring it back (for example "delete that" or "never call me that again") — it addition… |
| scope | string | – | Delete everything of yours in one call, instead of one id at a time. "imports": every memory you brought in through configure_profile_import, including older imports that predate import ids. "saved":… |
| Name | Type | Req | Description |
|---|---|---|---|
| deleted | boolean | yes | Whether anything was removed by this call. False on previews and no-matches. |
| deleted_count | number | – | – |
| deleted_ids | array | – | Ids of the memories a confirmed match deleted. |
| error | string | – | Present when the id was malformed or not found in your namespace. |
| id | string | – | The id of the deleted memory — the confirmation the caller acts on. |
| match | string | – | The match words this call used, echoed back. |
| matched | number | – | For match-based forgets: how many memories matched. |
| message | string | – | – |
| preview | array | – | Memories a match would delete; nothing is deleted until confirm is true. |
No examples provided.
configure_profile_import ~750
Import brings memories INTO the profile from outside — it never exports, lists, or shows what is already saved (use configure_profile_read or configure_profile_search for that, even when the user says "export" or "show me"). Two shapes go in here. A structured memory export, the ---SECTION:Name--- format with one dated entry per line that assistants produce when asked to export everything they know about the user, is split into individual profile facts and filed by category, which is how a first-time backfill from another assistant lands. Anything else is treated as one chunk of context: bulk-file it into your namespace when there is too much to save as a single fact — a long note, meeting notes, a multi-topic dump, or the current discussion when the user asks to save it. Configure distills it into a short context note (a stream, kept as-is in your namespace, not promoted to shared profile facts) and files it into a box automatically. Use configure_profile_remember instead for one clear fact the user stated; use configure_profile_commit to close out a turn after a profile read. Reach for import the moment the user provides material and says things like "keep all of this" or "import these notes", and when the user asks to save the current conversation ("save this whole conversation") — that explicit request is both the designation and the consent, so import is the right call, not a refusal. Send only what the user asked to keep, and never import anything on your own initiative. Optionally pass box to force the shelf: reuse an existing box id from the profile table of contents, or a short new lowercase name to create one; omit it to let Configure pick the box. Writes under your own agent namespace (resolved from the authenticated session, not arguments) and returns the chosen box and stored memory id. Additive: it only files context the user asked to keep. It never deletes or overwrites existing memories, and never emails, posts, or publishes anything on the user's b…
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | – | Optional, and only used for kind "context". The namespace box (shelf) to file the note under: reuse an existing box id from the profile table of contents, or a short new lowercase name to create one.… |
| kind | string | – | Which of the two PROCESSING shapes this text is, because they are stored differently (a different argument from configure_profile_remember's kind, which classifies a single project note). "memories":… |
| text | string | yes | Required. The content the user explicitly asked to keep — a memory export from another assistant, material they provided, or the discussion they asked to save. Include only what the user asked to imp… |
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | – | Box the note was filed under. |
| distilled | boolean | – | – |
| error | string | – | – |
| memory | object | – | – |
| saved | boolean | – | – |
| source | string | – | – |
No examples provided.
configure_profile_read ~835
Read the current user's approved profile. Use the no-argument overview only when the user explicitly asks to review their profile or get a profile overview. For personalized help or a specific fact, use configure_profile_search with a concrete query about the current task; no overview is needed first. Read a known category or project box when the user asks to review it or resume that project. Three ways in. (1) No arguments: the profile overview. Returns composed context, not raw files: identity, the synthesized narrative and preference docs, key facts each tagged with their box like "[work] …", changesSince (memories newer than the synthesized summary), and a table of contents of boxes. Category boxes ("work", "preferences-and-taste", …) hold Configure's settled facts; source boxes ("agents/atlas", "imports/chatgpt") hold one agent's or import's own notes; project boxes ("projects/<slug>") are shared tags across agents. The overview is budget-bounded; when something is cut it sets truncated and names the box ids holding the rest — open those instead of re-reading. (2) sections: strict pages of the composed document, and ONLY those pages — sections: ["imports"] is the imports overview (each provider's summary and count), ["soul"] is the full soul document (voice and personality) and ["context"] the full context document (current focus), each the untruncated version of what the overview cut, ["agents"] is the connected-agent map. Use a section when you want one page cheaply. (3) box: open one shelf of STORED memories by id from the table of contents; unknown or empty boxes return a clean empty result naming the boxes that exist. A box open returns ONE PAGE: the response carries total, and when total is larger than the notes you received, call read again with page: 2, then 3, until you have them all — answering from page 1 alone silently drops the rest. For point lookups (one fact, date ranges, source attribution) or filtering by author, use configure_profile_search.…
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | – | Optional box id from a previous read's table of contents. A category name like "work" opens the settled facts in that category, ranked by value, across all sources. "agents/<name>" or "imports/<provi… |
| detail | string | – | Optional box-open verbosity. Default compact truncates long notes and marks them truncated: true; pass "full" to read whole notes. Ignored without box. |
| page | number | – | Optional 1-based page for a box open. Each box open returns page_size facts and a total; pass page: 2 to continue a long box (project threads, big namespaces). Ignored without box. |
| sections | array | – | Strict page filter on the composed profile document: the response contains exactly the pages named here, nothing else. Omit for the profile overview (facts, boxes, sources, docs), only on an explicit… |
| since | string | – | Optional delta cursor for a box open ("YYYY-MM-DD" or an ISO timestamp): return only notes newer than this. Every box open returns latest (the newest note timestamp); store it and pass it back as sin… |
| Name | Type | Req | Description |
|---|---|---|---|
| boxes | array | – | Table of contents: category, source and project boxes. |
| changesSince | object | – | Memories written after the synthesized summary was generated, so a stale summary is paired with what changed. |
| connections | object | – | – |
| identity | object | – | – |
| integrations | object | – | – |
| linked | boolean | – | False when no Configure user is resolved for this session. |
| sources | array | – | – |
| top_facts | array | – | Highest-value facts, each prefixed with its category id in brackets, and the source that saved it. |
| truncated | boolean | – | – |
| truncated_boxes | array | – | – |
No examples provided.
configure_profile_remember ~733
Save one explicit, durable fact the user stated about themselves so any Configure-connected agent the user allows can use it in future conversations. Use it when the user asks you to remember something or clearly signals a fact is for keeps (a stable preference stated for future use, an ongoing goal); a detail mentioned in passing is not a request to persist it — when intent is unclear, ask before saving. Save one clear fact per call. Its scope is one stated fact: bulk pasted material, message arrays, one-off task context, and anything the user did not actually say fall outside it — configure_profile_import handles bulk context and configure_profile_commit handles turn-level inference. To save memories inferred from a whole turn rather than a single stated fact, use configure_profile_commit instead. Your own work is not a fact about the user: what you built, shipped, debugged, or are tracking belongs on the shared project shelf, so file it with box "projects/<slug>" for the next agent to read back, or leave it out. Optionally file the fact into a box (a shelf within your namespace) with the box argument: reuse an existing box id from the profile table of contents when one fits, otherwise pass a short new lowercase name and it is created on the spot. Writes under your own server-resolved agent namespace (identity is resolved from the authenticated session rather than from arguments) and returns the stored memory id and source. Additive: it only saves what the user asked to keep. It never deletes or overwrites existing memories, and never emails, posts, or publishes anything on the user's behalf.
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | – | Optional. The namespace box (shelf) to file this under. TWO KINDS. (1) A topic box, for facts about the user: "work", "contacts", "health". (2) "projects/<slug>", the shared handoff shelf, for notes… |
| fact | string | yes | Required. The single durable fact to store, phrased as a concise standalone statement about the user (for example "Prefers vegetarian restaurants"). One fact per call; do not batch multiple facts or… |
| kind | string | – | What kind of note this is, for "projects/<slug>" notes. Set it whenever you are stuck or need something back from another agent: "blocker" (you cannot proceed) and "question" (you need an answer) are… |
| reply_to | string | – | Optional. Memory id ("mem_...") of a note in the SAME box this one answers. Ids appear on notes when you open a project box. |
| resolves | string | – | Optional. Memory id ("mem_...") of a question or blocker in the SAME box that this note closes, which is what stops it being reported as open. |
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | – | Box the note was filed under. |
| distilled | boolean | – | – |
| error | string | – | – |
| memory | object | – | – |
| saved | boolean | – | – |
| source | string | – | – |
No examples provided.
configure_profile_remember_many ~323
Use this when the user asks to save several facts at once, or approves a list of facts you proposed. Saves each entry as a separate memory in the user's Configure profile, in one call. Send only facts the user asked to save or approved, each a short standalone statement about the user. If the user asks to review first, show the list and wait for their approval before calling. Use configure_profile_remember for a single fact. Accepts 1 to 100 facts per call, up to 1,000 characters each and 20,000 in total; send a longer approved list as several calls. It is not for passwords, keys, payment or health details, government identifiers, identity documents, sensitive personal attributes (race, religion, politics, sexuality, biometrics or genetics), or other people's personal data; the server's pattern checks are a backstop, not a complete filter, so these are left out before calling. Optional box files a fact under a category. Additive: it never changes or deletes existing memories. Returns a result for each entry and counts of saved, already_saved, refused and failed. Report those counts accurately, retry only failed entries, and never say the whole list was saved when some entries were refused or failed. Use configure_profile_import instead when the user supplies raw material rather than a list of facts: a note, a document, or an export from another assistant.
| Name | Type | Req | Description |
|---|---|---|---|
| facts | array | yes | Short standalone facts the user asked to save or approved. At most 20,000 fact characters in total. |
| Name | Type | Req | Description |
|---|---|---|---|
| counts | object | yes | – |
| results | array | yes | – |
No examples provided.
configure_profile_search ~505
Search or list permitted attributed profile memories/facts for the current user. Use this for personalized help, targeted retrieval, source-specific questions, or exact memory/fact lookup. For personalized help, pass a concrete query about the current task and relevant filters when known; no overview is needed first. Omit query or pass "*" only when the user asks to list saved memories, narrowing by the requested source, category or date when specified. For "what does <source> know about me?", pass query "*" plus source, e.g. "tempo" or "chatgpt". To search inside one category from configure_profile_read's table of contents, pass box with that box id, e.g. "work"; box narrows to the settled category facts and composes with query. For relative-date questions, resolve dates first and pass from/to; compact results may include snippets. Pass detail "full" when complete result text or inspectable metadata matters. Results from an import also carry imported_by_agent and import_id, which is what configure_profile_forget takes to retract that whole import.
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | – | Optional category box id from configure_profile_read's table of contents, such as "work". Filters to the settled facts in that box and composes with query; unknown or empty boxes return empty results… |
| detail | string | – | Optional result detail. Defaults to compact, which truncates long memory text. Full returns the complete text plus markers. Every result at either detail carries id, source, written_by, and saved_on… |
| from | string | – | Optional inclusive start date filter in YYYY-MM-DD format for date-attributed results. |
| limit | number | – | Optional maximum result count. The backend enforces a default and hard cap. |
| query | string | – | Optional search query. Omit or use "*" to list bounded permitted attributed profile results, for example with a source filter. |
| source | string | – | Optional explicit source handle filter, such as "tempo", "chatgpt", or "import:chatgpt". Source-box ids from configure_profile_read's table of contents ("agents/<name>", "imports/<provider>") are als… |
| to | string | – | Optional inclusive end date filter in YYYY-MM-DD format for date-attributed results. |
| Name | Type | Req | Description |
|---|---|---|---|
| guidance | object | – | What to do next when results are thin: a status, a short explanation, and a suggested next action. |
| results | array | yes | Matching attributed memories, each with id, text and source. |
| visibleSources | array | – | – |
No examples provided.
configure_project_share ~323
Share one Configure project without making a copy. Four modes with different stakes — action "list" only inspects (grants and open counts, changes nothing); every other mode changes access outside this conversation and needs the user's explicit go-ahead for that specific change. action "share" grants a named person (email or phone) read access, write only when the user explicitly grants it; "share" with mode "link" mints a public read-only link — confirm the user wants it public; "revoke" with grant_id removes one grant, and "revoke" WITHOUT grant_id unshares the whole project — confirm which of the two the user means before calling. Link tokens are shown once and never appear in grant listings.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | The sharing action to perform. |
| can_write | boolean | – | For a member share, allow the member to append notes. Omit or false for read-only membership. |
| expires_in_days | number | – | Optional whole-number lifetime for this grant, from 1 to 3650 days. |
| grant_id | string | – | Grant id from a prior list result. Omit it with action "revoke" to unshare the whole project. |
| mode | string | – | Use "link" to mint a public read-only link. Links can never write. |
| project | string | yes | Project slug, such as "billing-migration" or box id "projects/billing-migration". |
| with | string | – | Email address or E.164 phone number for a private member share. |
| Name | Type | Req | Description |
|---|---|---|---|
| grant | object | – | – |
| grant_id | string | – | – |
| grants | array | – | – |
| project | string | yes | The canonical projects/<slug> box. |
| resolved | boolean | – | Whether a member contact resolved to a Configure identity. |
| revoked | boolean | – | – |
| share | object | – | – |
| share_url | string | – | Public read-only URL. Present only in a successful link mint result. |
| token | string | – | Raw link token. Present exactly once in a successful link mint result and never in listings. |
No examples provided.
How do I install the Configure Memory MCP server?
Configure Memory is a hosted endpoint at https://mcp.configure.dev/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.configure.dev
claude mcp add --transport http configure-dev-configure-memory 'https://mcp.configure.dev/'
What is the Configure Memory MCP server?
Configure Memory is an MCP server listed in the public MCP registry as io.github.configure-dev/configure-memory. Bring your saved preferences, project decisions, and useful context into your next AI conversation. This page covers its hosted endpoint (https://mcp.configure.dev/).
Is the Configure Memory MCP server safe to use?
Configure Memory scores 92 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Configure Memory MCP server expose?
Configure Memory exposes 9 tools: configure_connect, configure_profile_read, configure_profile_search, configure_profile_remember, configure_profile_remember_many, and 4 more. Their descriptions and schemas cost roughly 5,173 tokens of context every time the server is loaded.
Does the Configure Memory MCP server require authentication?
Yes. Configure Memory asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Configure Memory MCP server still maintained?
Configure Memory is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.