Product · how it works

Remember. Recall. Attest.

Four MCP tools, no tenant argument — the tenant is your token. What one agent learns, your fleet knows, sealed in your own compartment.

remember()
Write path, done right

Extraction → dedup → contradiction-resolution → temporal supersession. Facts are distilled and kept current, not just appended.

recall()
Hybrid retrieval

BM25 + vector + graph, fused with RRF and reranked. Returns current-truth facts with provenance — not a raw dump.

verify_isolation()
Attest anytime

Live fault-injection probes → an Ed25519-signed receipt. Your security team re-runs it; the filter never has to be trusted.

The substrate

  • Neon Postgres 17 + pgvector
  • schema-per-tenant
  • NOLOGIN role + GRANT
  • FORCE RLS
  • AES-256-GCM envelope (tenant_id AAD)
  • MCP Streamable-HTTP · OAuth 2.1 (RFC 9728)
  • REST /v1/memories