io.github.keshrath/agent-knowledge
NPM · AGENT-KNOWLEDGE
Cross-session memory for AI agents - knowledge graph, scoring, semantic search
Available components
Last scanned (23 hours ago)
Scores higher than 93% of npm servers
Category Memory and Knowledge
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security89
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects sharp 0.34.5, reached via @huggingface/transformers > sharp. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 73 of 208 dependencies flagged as unhealthy (2 deprecated). View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to keshrath/agent-knowledge). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 10 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability62
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2345 tokens (~390/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 31 Oct 26 0
- Stability: 0.97 → pass security
- 30 Oct 26 0
- Stability: pass → 0.97 functional
- 25 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 24 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- Stability: 0.97 → pass security
- Package version: 1.9.8 → 2.0.0 functional
- 23 Oct 26 0
- Stability: pass → 0.97 functional
- 22 Oct 26 0
- CVE-2026-114112 affects this package: high ▼ security
- CVE-2026-114113 affects this package: high ▼ security
- CVE-2026-114111 affects this package: high ▼ security
- GHSA-wq5f-xc86-pv6w no longer affects this package ▲ security
- GHSA-rgj7-g3m4-5g8c no longer affects this package ▲ security
- GHSA-f88m-g3jw-g9cj no longer affects this package ▲ security
- Package version: 1.9.7 → 1.9.8 functional
- 17 Oct 26 0
- Stability: 0.97 → pass security
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/agent-knowledge@2.0.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | keshrath/agent-knowledge |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/keshrath/agent-knowledge/.github/workflows/ci.yml@refs/tags/v2.0.0 |
| Rekor log index | 3437060348 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:35cf8ad375c37862ec4f45bce33d0f60eb3ed639cfbadd28c69a6eb6c1ff44ff99fad50139420e8614af2ca99aaf09ac3e9ab69e6fac25181b122dbea |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 3 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-f88m-g3jw-g9cj | CVE-2026-114113 | high | yes | |
| GHSA-rgj7-g3m4-5g8c | CVE-2026-114112 | high | yes | |
| GHSA-wq5f-xc86-pv6w | CVE-2026-114111 | high | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 208 packages
| Packages resolved | 208 |
|---|---|
| Deprecated | 2 |
| Stale | 72 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
knowledge ~386
Knowledge base CRUD, sync, and session-start hydration. Actions: "list" (browse entries), "read" (get entry content), "write" (create/update entry, auto git sync), "delete" (remove entry, auto git sync), "sync" (manual git pull + push), "wakeup" (return token-budgeted section-priority context bundle — identity, active_tasks, recent_decisions, known_gotchas, last_session_summary, top_weighted, semantic_fallback — call once at session start).
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| category | string | – | Category (action=list: filter; action=write: target directory). One of: projects, people, decisions, workflows, notes |
| content | string | – | Full markdown content for the entry (action=write) |
| filename | string | – | Filename with or without .md extension (action=write), e.g. 'my-project.md' |
| path | string | – | Relative path to the entry, e.g. 'projects/my-project.md' (action=read, delete) |
| section_budgets | object | – | [wakeup] Per-section token-budget overrides, e.g. {"identity": 200, "top_weighted": 400}. Unspecified sections split the remainder evenly. Unused budget redistributes to later sections. |
| sections | string | – | [wakeup] Comma-separated, ordered section list. Valid: identity, active_tasks, recent_decisions, known_gotchas, last_session_summary, top_weighted, semantic_fallback. Default: all seven in that order… |
| tag | string | – | Filter by tag (action=list) |
| token_budget | number | – | [wakeup] Max tokens to render (chars/4 estimate, default 800) |
No output schema declared.
No examples provided.
knowledge_admin ~371
Admin operations: view vector store stats, view/update configuration, rebuild embeddings, prune orphan session embeddings, or VACUUM the database. Use action "status" for index stats, "config" to view or update settings, "rebuild_embeddings" to re-embed all knowledge entries (useful when switching providers), "prune_orphans" to delete embeddings for sessions no longer present on disk, "vacuum" to reclaim free pages.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: status (vector store stats), config (view/update settings), rebuild_embeddings (re-embed all entries), prune_orphans (delete embeddings for missing sessions), vacuum (reclaim free pages), pro… |
| auto_distill | boolean | – | Enable/disable scheduled promotion (action=config) |
| force_vacuum | boolean | – | Run VACUUM even if no orphans were pruned (action=prune_orphans) |
| git_url | string | – | Git remote URL (action=config). Set to empty string to remove. |
| memory_dir | string | – | Local knowledge base directory (action=config). Empty to reset. |
| min_recall_count | number | – | [promote] Minimum recall count gate (default: 2). |
| min_score | number | – | [promote] Minimum composite score to promote (default: 0.5). |
| min_unique_queries | number | – | [promote] Minimum unique-query gate (default: 2). |
| promote_mode | string | – | action=promote mode (default: explain). "explain" returns score breakdowns without writing; "apply" promotes candidates that pass all gates. |
| vacuum | boolean | – | Run VACUUM after pruning (action=prune_orphans, default true) |
No output schema declared.
No examples provided.
knowledge_analyze ~440
Analysis tools: find duplicates, unconnected entries, most-connected concepts (god nodes), bridge entries, knowledge gaps, zero-result search queries, stale-by-code-activity entries, or generate a compact knowledge brief. Actions: consolidate, reflect, god_nodes, bridges, gaps, brief, search_gaps, stale_by_code_activity.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: consolidate (find duplicates), reflect (find unconnected entries), god_nodes (most-connected entries), bridges (cross-cluster connectors), gaps (entries with 0-1 edges), brief (compact knowle… |
| category | string | – | Scan only this category (omit for all) |
| group_similarity | number | – | [search_gaps] Jaccard token similarity threshold for merging near-duplicate queries (default: 0.35, range 0-1). Low because short queries yield low Jaccard even when topically related. |
| max_entries | number | – | Max unconnected entries to include (action=reflect, default: 20) |
| min_count | number | – | [search_gaps] Minimum occurrence count per merged group (default: 1). Raise to surface only repeated misses. |
| min_touching_sessions | number | – | [stale_by_code_activity] Minimum distinct sessions that must have modified one of the entry's referenced files for it to be flagged (default: 1). |
| since_days | number | – | [search_gaps] Lookback window in days (default: 30). Only queries logged within this window are considered. |
| threshold | number | – | Similarity threshold 0-1 (action=consolidate, default: 0.5) |
| top_n | number | – | Number of results (action=god_nodes default: 10, action=bridges default: 5) |
No output schema declared.
No examples provided.
knowledge_graph ~492
Knowledge graph operations with temporal validity and code structure support. Create/remove edges, traverse via directed BFS, bulk-import code graph edges. Relationship types: related_to, supersedes, depends_on, contradicts, specializes, part_of, alternative_to, builds_on, calls, imports, inherits. Code structure types (calls/imports/inherits) are created by knowledge-ingest and use "code:" prefixed node IDs.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action: link (create edge), unlink (remove edge), invalidate (set valid_to), list (list edges), traverse (directed BFS), bulk_link (batch-create edges), unlink_by_origin (delete all edges from a spec… |
| as_of | string | – | ISO date — only return edges valid at this date (action=list/traverse, optional) |
| depth | number | – | Max traversal depth in hops (action=traverse, default: 2) |
| direction | string | – | Traversal direction (action=traverse, default: both). outbound: follow source→target (what does X call?). inbound: follow target→source (who calls X?). both: undirected (default, preserves legacy beh… |
| edges | array | – | Array of edges to create (action=bulk_link). Each: { source, target, rel_type, strength?, origin? } |
| entry | string | – | Entry path for filtering (action=list) or BFS start (action=traverse) |
| origin | string | – | Edge origin to delete (action=unlink_by_origin). E.g. "tree-sitter" to clear code graph before re-ingest. |
| rel_type | string | – | Relationship type (required for link, optional filter for unlink/invalidate/list) |
| source | string | – | Source entry path (action=link/unlink/invalidate), e.g. 'projects/my-project.md' |
| strength | number | – | Edge strength 0-1 (action=link, default: 0.5) |
| target | string | – | Target entry path (action=link/unlink/invalidate), e.g. 'decisions/architecture.md' |
| valid_from | string | – | ISO date the fact became true (action=link, optional). Null/omitted = unbounded. |
| valid_to | string | – | ISO date the fact stopped being true (action=link/invalidate). For invalidate, defaults to today. |
No output schema declared.
No examples provided.
knowledge_search ~487
Search across sessions AND knowledge entries. Returns `{mode, sessions, knowledge}`. General mode (no `scope`): hybrid TF-IDF + semantic over both sources, with optional MMR diversity and category boost. Scoped mode (`scope` set): sessions-only filtered recall for a specific domain (errors, plans, configs, tools, files, decisions).
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Knowledge category hint (optional). By default applied as a boost (non-matching kept, matching +25%). Pass category_mode="filter" for the legacy hard-filter behavior. |
| category_mode | string | – | How `category` is applied to knowledge results (default: "boost"). "boost" keeps all entries but gives matching-category entries a 25% score boost; "filter" restricts to matching category only. |
| explain | boolean | – | When true, each knowledge hit carries `score_components` (bm25, decay, maturity, confidence, category_boost, mmr_penalty). |
| max_results | number | – | Maximum number of results to return (default: 20) |
| mmr | boolean | – | Apply Maximal Marginal Relevance re-ranking to knowledge results (default: false). Trades a small amount of top-1 relevance for diversity in the top-K. |
| mmr_lambda | number | – | MMR tradeoff 0-1 (default: 0.7). 1.0 = pure relevance; 0.0 = pure diversity. |
| project | string | – | Restrict search to sessions from this project |
| query | string | yes | Search query -- supports keywords and phrases |
| ranked | boolean | – | Use TF-IDF ranking (default: true, ignored when scope is set). Set false for regex mode. |
| role | string | – | Filter by message role (default: all, ignored when scope is set) |
| scope | string | – | Search scope (optional): errors (stack traces), plans (architecture, TODOs), configs (settings, env vars), tools (MCP tool calls), files (file paths, code refs), decisions (trade-offs, choices), all… |
| semantic | boolean | – | Blend semantic vector similarity with TF-IDF (default: true). Falls back to pure TF-IDF if embeddings unavailable. |
No output schema declared.
No examples provided.
knowledge_session ~169
Session operations: list sessions, get a full conversation, or get a summary. Use action "list" to browse sessions, "get" to retrieve messages, "summary" for a quick overview.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| include_tools | boolean | – | Include tool_use and tool_result messages (action=get, default: false) |
| limit | number | – | Max sessions to return (action=list, default: 20, max: 500) |
| offset | number | – | Skip first N sessions (action=list, default: 0) |
| project | string | – | Filter by project name (substring match) |
| session_id | string | – | Session UUID (required for get, summary) |
| tail | number | – | Only return the last N messages (action=get) |
No output schema declared.
No examples provided.
How do I install the io.github.keshrath/agent-knowledge MCP server?
io.github.keshrath/agent-knowledge runs locally as an npm package, launched with npx -y agent-knowledge. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · agent-knowledge
claude mcp add keshrath-agent-knowledge -- npx -y agent-knowledge
What is the io.github.keshrath/agent-knowledge MCP server?
io.github.keshrath/agent-knowledge is an MCP server listed in the public MCP registry as io.github.keshrath/agent-knowledge. Cross-session memory for AI agents - knowledge graph, scoring, semantic search. This page covers its npm package (agent-knowledge).
Is the io.github.keshrath/agent-knowledge MCP server safe to use?
io.github.keshrath/agent-knowledge scores 89 out of 100 on VerifyMCP. We recorded 3 known advisories against it as of 4 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.keshrath/agent-knowledge MCP server expose?
io.github.keshrath/agent-knowledge exposes 6 tools: knowledge, knowledge_search, knowledge_session, knowledge_admin, knowledge_graph, knowledge_analyze. Their descriptions and schemas cost roughly 2,345 tokens of context every time the server is loaded.
Is the io.github.keshrath/agent-knowledge MCP server still maintained?
io.github.keshrath/agent-knowledge is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.keshrath/agent-knowledge MCP server under?
io.github.keshrath/agent-knowledge declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.