Product · how it works
Remember. Recall. Attest.
Four MCP tools, no tenant argument — the tenant is your token. What one agent learns, your fleet knows, sealed in your own compartment.
remember()
Write path, done right
Extraction → dedup → contradiction-resolution → temporal supersession. Facts are distilled and kept current, not just appended.
recall()
Hybrid retrieval
BM25 + vector + graph, fused with RRF and reranked. Returns current-truth facts with provenance — not a raw dump.
verify_isolation()
Attest anytime
Live fault-injection probes → an Ed25519-signed receipt. Your security team re-runs it; the filter never has to be trusted.
The substrate
- Neon Postgres 17 + pgvector
- schema-per-tenant
- NOLOGIN role + GRANT
- FORCE RLS
- AES-256-GCM envelope (tenant_id AAD)
- MCP Streamable-HTTP · OAuth 2.1 (RFC 9728)
- REST /v1/memories