io.github.kael-bit/engram

NPM · ENGRAM-RS-MCP · SCANNED AUG 3

Hierarchical memory for AI agents. Three-layer (buffer/working/core) with decay and promotion.

Available components

+23 this week 69 69 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 156 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability77

AI-judged instruction clarity (excellent).Pass
Tool/resource definitions use about 1393 tokens (~92/item across 15 items; 15 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · engram-rs-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add kael-bit-engram -- npx -y engram-rs-mcp

# add to Codex CLI

codex mcp add kael-bit-engram -- npx -y engram-rs-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "kael-bit-engram": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "engram-rs-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add kael-bit-engram --command npx --arg -y --arg engram-rs-mcp

# ~/.hermes/config.yaml

mcp_servers:
  kael-bit-engram:
    command: "npx"
    args: ["-y", "engram-rs-mcp"]

// mcp.json

{
  "mcpServers": {
    "kael-bit-engram": {
      "command": "npx",
      "args": [
        "-y",
        "engram-rs-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +48
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.20 ▲ functional
- Schema quality: unverified → excellent ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- License: unverified → pass ▲ functional
- Licence: MIT functional
31 Jul 26 −7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 46

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 15 exposed · ~1,393 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

engram_consolidate ~111

Run a memory consolidation cycle. Promotes important memories upward, drops decayed entries. With merge=true, uses LLM to merge similar memories.

Input Output Examples

Name	Type	Req	Description
decay_drop_threshold	number	—	Drop below this recency (default 0.01)
merge	boolean	—	Use LLM to merge similar memories
promote_min_importance	number	—	Min importance to promote (default 0.6)
promote_threshold	integer	—	Min access count to promote (default 3)

No output schema declared.

No examples provided.

engram_delete ~38

Delete a memory by ID. Use when a memory is outdated, incorrect, or redundant.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Memory ID to delete

No output schema declared.

No examples provided.

engram_extract ~55

Extract structured memories from raw text using LLM. Feed conversation logs or notes and get individual memories.

Input Output Examples

Name	Type	Req	Description
auto_embed	boolean	—	Generate embeddings (default true)
text	string	yes	Raw text to extract memories from

No output schema declared.

No examples provided.

engram_health ~26

Detailed health check: uptime, RSS memory, embed cache stats, AI config status.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

engram_recall ~291

Hybrid semantic + keyword search with budget-aware retrieval. Fast by default (~30ms cached, ~1s first query). Optional rerank/expand add LLM calls (+2-4s each) — only use when needed.

Input Output Examples

Name	Type	Req	Description
budget_tokens	integer	—	Max token budget
dry	boolean	—	Skip touch/reinforcement on results (for background queries)
expand	boolean	—	LLM query expansion (+1-2s). Use for short/vague queries like single words
layers	array	—	Filter by layers
limit	integer	—	Max results
min_importance	number	—	Min importance threshold
min_score	number	—	Drop results below this score (0-1)
namespace	string	—	Filter by namespace (also includes "default" namespace automatically)
query	string	yes	Search query
rerank	boolean	—	Re-rank via LLM (+2-4s). Use only when result ordering is critical
since	integer	—	Only memories created after this unix ms timestamp
sort_by	string	—	Sort order (default: score)
source	string	—	Filter by source (e.g. session, extract, api)
tags	array	—	Filter by tags (must have ALL specified)
until	integer	—	Only memories created before this unix ms timestamp

No output schema declared.

No examples provided.

engram_recent ~105

List recent memories by creation time. Good for session context recovery.

Input Output Examples

Name	Type	Req	Description
hours	number	—	Look back N hours (default 2)
layer	integer	—	Filter by layer
limit	integer	—	Max results (default 20)
min_importance	number	—	Minimum importance threshold
namespace	string	—	Filter by namespace (also includes "default" namespace automatically)
source	string	—	Filter by source (e.g. session)

No output schema declared.

No examples provided.

engram_repair ~35

Repair FTS search index. Removes orphaned entries and rebuilds missing ones. Safe to run anytime — idempotent.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

engram_restore ~36

Restore a soft-deleted memory from trash back to its original layer.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Memory ID to restore from trash

No output schema declared.

No examples provided.

engram_resume ~182

Full memory bootstrap for session recovery. Returns core (permanent knowledge), working (ongoing context/decisions), buffer (transient), recent activity, and session notes. Use workspace tags to filter by current work context. Compact mode (default) minimizes token usage.

Input Output Examples

Name	Type	Req	Description
budget	number	—	Max chars across all sections (default 8000, 0=unlimited)
compact	boolean	—	Compact output: content+tags only (default true)
hours	number	—	Look back N hours for recent/sessions (default 4)
limit	number	—	Max memories per layer (default 100)
namespace	string	—	Filter by namespace (also includes "default" namespace automatically)
workspace	string	—	Comma-separated workspace tags to filter core/working memories (e.g. 'engram,rust')

No output schema declared.

No examples provided.

engram_search ~64

Quick keyword search. Lighter than recall — no scoring or budget logic.

Input Output Examples

Name	Type	Req	Description
limit	integer	—	Max results (default 10)
namespace	string	—	Filter by namespace (also includes "default" namespace automatically)
q	string	yes	Search query

No output schema declared.

No examples provided.

engram_stats ~22

Get memory statistics: counts per layer, AI status, version.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

engram_store ~222

Store a memory. All memories start in Buffer and promote to Working/Core through access frequency and LLM quality gating. Procedural memories and lessons (tag=lesson) auto-promote to Working after 2h. Use supersedes to replace outdated memories by their ids.

Input Output Examples

Name	Type	Req	Description
content	string	yes	Memory content text
importance	number	—	Importance 0-1 (default 0.5, bumps +0.02 on each recall)
kind	string	—	Memory type: semantic (facts, default), episodic (events), procedural (how-to, persists indefinitely)
namespace	string	—	Override namespace. Use "default" for cross-project knowledge (user identity, preferences, universal lessons)
skip_dedup	boolean	—	Skip near-duplicate detection
source	string	—	Source identifier
supersedes	array	—	IDs of old memories this one replaces
sync_embed	boolean	—	Wait for embedding generation before returning (default: false)
tags	array	—	Tags for categorization

No output schema declared.

No examples provided.

engram_trash ~36

List soft-deleted memories. Recently deleted items can be restored.

Input Output Examples

Name	Type	Req	Description
limit	integer	—	Max results (default 100)

No output schema declared.

No examples provided.

engram_triggers ~61

Fetch trigger memories for a specific action. Call before performing an action (e.g. git-push, deploy) to recall relevant lessons and rules.

Input Output Examples

Name	Type	Req	Description
action	string	yes	Action name (e.g. git-push, deploy, send-message)

No output schema declared.

No examples provided.

engram_update ~109

Update a memory's content, metadata (importance, tags, layer, kind). Use supersedes on store to replace with history.

Input Output Examples

Name	Type	Req	Description
content	string	—	New content text
id	string	yes	Memory ID to update
importance	number	—	New importance value
kind	string	—	Memory type
layer	integer	—	Move to layer: 1=buffer, 2=working, 3=core
tags	array	—	Replace tags

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug