
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Open-source cross-agent memory layer for coding agents across Cursor, Claude Code, Codex, Windsurf, Gemini CLI, Copilot, Kiro, OpenCode, Antigravity, and Trae via MCP.
Open-source cross-agent memory layer for coding agents.
Compatible with Cursor, Claude Code, Codex, Windsurf, Gemini CLI, GitHub Copilot, Kiro, OpenCode, Antigravity, and Trae through MCP.
Git Memory | Reasoning Memory | Cross-Agent Recall | Control Plane Dashboard
中文说明 | Quick Start | Supported Clients | Core Workflows | Documentation | Setup Guide
Most coding agents remember only the current thread. Memorix gives them a shared, persistent memory layer across IDEs, sessions, and projects.
What makes Memorix different:
git commit into searchable engineering memory with noise filtering and commit provenance.Memorix is built for one job: let multiple coding agents share the same durable project memory through MCP without giving up Git truth, reasoning history, or local control.
Memorix currently ships first-class integrations for:
If a client can speak MCP and launch a local command or HTTP endpoint, it can usually connect to Memorix even if it is not in the list above yet.
Install globally:
npm install -g memorix
Initialize project config:
memorix init
Memorix uses two files with two roles:
memorix.yml for behavior and project settings.env for secrets such as API keysChoose one runtime mode:
memorix serve
Use serve for normal stdio MCP integrations.
memorix serve-http --port 3211
Use serve-http when you want the HTTP transport, collaboration features, and the dashboard on the same port.
In HTTP control-plane mode, agents should call memorix_session_start with projectRoot set to the absolute path of the current workspace or repo root when that path is available. Git remains the source of truth for the final project identity; projectRoot is the detection anchor that keeps parallel sessions from drifting into the wrong project bucket.
Add Memorix to your MCP client:
.cursor/mcp.json{
"mcpServers": {
"memorix": {
"command": "memorix",
"args": ["serve"]
}
}
}
claude mcp add memorix -- memorix serve
~/.codex/config.toml[mcp_servers.memorix]
command = "memorix"
args = ["serve"]
For the full IDE matrix, Windows notes, and troubleshooting, see docs/SETUP.md.
Use MCP tools such as:
memorix_storememorix_searchmemorix_detailmemorix_timelinememorix_resolveThis covers decisions, gotchas, problem-solution notes, and session handoff context.
Install the post-commit hook:
memorix git-hook --force
Or ingest manually:
memorix ingest commit
memorix ingest log --count 20
Git memories are stored with source='git', commit hashes, changed files, and noise filtering.
memorix serve-http --port 3211
Then open:
http://localhost:3211/mcphttp://localhost:3211This mode gives you collaboration tools, project identity diagnostics, config provenance, Git Memory views, and the dashboard in one place.
When multiple HTTP sessions are open at once, each session should bind itself with memorix_session_start(projectRoot=...) before using project-scoped memory tools.
graph TB
A["git commit / agent tool call / manual store"] --> B["Memorix Runtime"]
B --> C["Observation / Reasoning / Git Memory"]
C --> D["Formation + Indexing + Graph + Retention"]
D --> E["Search / Detail / Timeline / Dashboard / Team"]
scope="global" searches across projectsgit clone https://github.com/AVIDS2/memorix.git
cd memorix
npm install
npm run dev
npm test
npm run build
Key local commands:
memorix status
memorix dashboard
memorix serve-http --port 3211
memorix git-hook --force
Memorix builds on ideas from mcp-memory-service, MemCP, claude-mem, Mem0, and the broader MCP ecosystem.
FAQs
Open-source cross-agent memory layer for coding agents across Cursor, Claude Code, Codex, Windsurf, Gemini CLI, Copilot, Kiro, OpenCode, Antigravity, and Trae via MCP.
We found that memorix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.