
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
logbook-mcp
Advanced tools
Project memory across sessions for AI agents. A queryable decision log that survives between sessions, so agents remember what was decided and why.
Project memory across sessions for AI agents. A queryable decision log that lives in the repository, so an agent remembers what was decided and why, instead of re-deriving it at full token cost.
Built as an MCP server, so it works in any platform that speaks Model Context Protocol.
Agents forget everything between sessions. The decision that "the domain is served by Cloudflare Pages, never deploy to Netlify" is paid for once and lost. Logbook persists it in .logbook/logbook.json, tagged and searchable, so the next session starts where the last one finished.
logbook.record record a decision, finding, gotcha, or note with a scope and tagslogbook.search search by text, scope, tags, or typelogbook.recent the latest entrieslogbook.stats counts by type and scopelogbook.forget remove an entry by idnpm install -g logbook-mcp
{
"mcpServers": {
"logbook": {
"command": "logbook-mcp",
"args": []
}
}
}
MIT. Part of the Tawakkul Labs MCP family.
FAQs
Project memory across sessions for AI agents. A queryable decision log that survives between sessions, so agents remember what was decided and why.
The npm package logbook-mcp receives a total of 592 weekly downloads. As such, logbook-mcp popularity was classified as not popular.
We found that logbook-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.