
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@memofs/mcp-server
Advanced tools
@memofs/mcp-serverModel Context Protocol server for MemoFS agent integrations.
The @memofs/mcp-server package allows AI coding agents (like Claude Desktop, Cursor, Zed, and OpenCode) to securely read, search, and update project memory using the Model Context Protocol (MCP). It wraps the core runtime and exposes 10 model-facing tools (4 memory verbs + 6 AgentFS session tools) and 9 resources for memory, graph, and session access.
Key capabilities:
memofs.remember accepts an optional anchor parameter to bind memories to source files; memofs.recall surfaces stale flags when anchored files change.unverified flags when memories exceed their kind-specific decay floors.memofs_agent_session_complete accepts outcome, ephemeral, and reason parameters controlling a 5-row behavior matrix for durable memory promotion and workspace cleanup.Most MCP clients invoke the server on demand via npx — no install required:
npx -y @memofs/mcp-server --help
If you want to install the server as a dev dependency instead:
npm install -D @memofs/mcp-server
Requires Node.js >= 22.
Or use directly via npx in your client's configuration:
npx -y @memofs/mcp-server --help
You can configure your MCP client (e.g., Claude Desktop, Cursor, or any MCP client) to start the server via stdio.
{
"mcpServers": {
"memofs": {
"command": "npx",
"args": [
"-y",
"@memofs/mcp-server",
"--runtime",
"local",
"--root",
"/absolute/path/to/project"
]
}
}
}
The server supports two runtime modes (local, hybrid), cloud sync via --cloud-url and --api-key, and a strict --read-only flag to block mutating tools when used with untrusted clients.
For comprehensive setup instructions across all major AI tools, the full list of exposed tools and resources, and runtime mode options, please refer to the Full Documentation.
See our central Contributing Guide and development scripts for details on formatting, linting, and testing within the monorepo.
MIT
FAQs
Model Context Protocol server for MemoFS agent integrations.
We found that @memofs/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.