
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
temporal-mcp
Advanced tools
Temporal grounding for LLM agents: per-thread elapsed time, day rollover, and resume detection as an MCP server.
Your model knows calculus but not what day it is. Fix that.
temporal-mcp is a tiny Model Context Protocol
server that gives LLM agents a sense of time between turns. Two tools, a few
hundred lines, stdlib + mcp + platformdirs. That's the whole thing.
Open a fresh chat at 11 PM. The model says "good morning." Resume a conversation three weeks later. The model picks up mid-sentence like no time passed. Ask for "today's status." Get yesterday's status. Or last Tuesday's.
LLMs don't have wall clocks. They don't know when the last user message was, whether the calendar flipped, or whether this is a fresh thread or one resumed after a long gap. Most of the time this is harmless. Sometimes it makes your agent sound like it just woke up from cryosleep.
A persistent per-thread last-seen log, exposed as two MCP tools:
temporal_tick — call this once per user turn. Returns "it has been
14 minutes since the last message, no day rollover, timezone MDT" in a
format the model can actually read.temporal_peek — same thing, but doesn't advance state. For when you
want the gap without claiming a turn.That's it. Time exists. Your model should know that.
curl -s -X POST https://temporal-mcp.dev/mcp \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $(uuidgen)" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{
"name":"temporal_tick",
"arguments":{"thread_key":"try-it","tz_offset_minutes":-360,"tz_name":"MDT"}}}' \
| python3 -c 'import sys,json; print(json.load(sys.stdin)["result"]["content"][0]["text"])'
You'll see something like:
[temporal] Wed May 13, 10:42 AM MDT | fresh thread (no prior history)
{...JSON payload...}
Run it twice and the second response shows the gap. Run it tomorrow and
you'll get day rollover: yes. That's the whole point.
Every tick returns a human-readable header and a JSON payload:
[temporal] Wed May 13, 9:42 AM MDT | last prompt 14m ago (Wed 9:28 AM)
{"thread_key": "mcp:abc123", "now": 1747158120.0, "prev": 1747157280.0,
"delta_sec": 840, "day_rollover": false, "fresh_thread": false,
"tz_name": "MDT", "tz_offset_sec": -21600, "available": true, "error": ""}
The header is for the model. The JSON is for your code, in case you want to
do something interesting with day_rollover (greet differently, reload
context, recompute "today's items") or with delta_sec (decay relevance,
detect a resumed session, flag idle threads).
If you use claude.ai web, ChatGPT, or anything else that wants a remote MCP server, point your connector at:
https://temporal-mcp.dev/mcp
Authentication is one header:
Authorization: Bearer <any opaque string you choose>
Pick a UUID, a passphrase, a sentence about your dog — anything. We SHA-256 it before storing anything, so we never see the token itself. It is your private key for your timeline. Lose it and your history resets; share it and someone else can advance your timeline.
No signup. No email. No PII. The hosted endpoint is free, rate-limited to 60 requests/minute per token. If you outgrow that, self-host (see below).
Settings → Connectors → Add Custom Connector. URL https://temporal-mcp.dev/mcp,
auth type Bearer Token, paste your chosen token.
Same idea — Settings → Connectors → Custom MCP. Same URL, same token.
For desktop/IDE MCP clients, pip install the Python package and run it
locally. No network round-trip, state lives on your disk, no auth needed.
pip install temporal-mcp
Python 3.9+. Linux, macOS, Windows.
Run as stdio:
temporal-mcp # or: python -m temporal_mcp
{
"mcpServers": {
"temporal": {
"command": "temporal-mcp"
}
}
}
Same idea — point the client at the temporal-mcp command.
The hosted endpoint at temporal-mcp.dev runs on Cloudflare Workers backed
by D1. If you want your own instance — for privacy, scale, or to ship it
as part of a larger product — the entire deploy lives in
workers/:
cd workers
npm install
npx wrangler login
npx wrangler d1 create temporal_mcp # creates the database
# Paste the printed database_id into wrangler.toml
npx wrangler d1 migrations apply temporal_mcp --remote
npx wrangler deploy
Free tier covers ~100k requests/day forever. Set
REQUIRE_AUTH=true in [vars] to refuse anonymous traffic. The Worker
is ~400 lines of TypeScript and has its own unit tests
(workers/test/).
temporal_tickAdvance the clock for a thread and return a snapshot. Call once per user turn.
| Field | Type | Notes |
|---|---|---|
thread_key | string, optional | Stable conversation/session ID. claude.ai web: conversation ID. Cursor: window/workspace ID. Anything else: any caller-stable string. Omit it and you get a default hostname+cwd hash — fine for local testing, not for serving multiple threads. |
client_id | string, optional | Namespace tag (e.g. "caweb", "cursor"). Defaults to "mcp". Use distinct tags per client so threads don't collide in shared state. |
temporal_peekRead-only. Same shape, doesn't advance state. Use it when you want the gap delta but the call isn't the canonical "one tick per user turn" event.
Per-thread last-seen state lives at:
| Platform | Path |
|---|---|
| Linux | ~/.local/share/temporal-mcp/state.json |
| macOS | ~/Library/Application Support/temporal-mcp/state.json |
| Windows | %LOCALAPPDATA%\temporal-mcp\state.json |
Override with TEMPORAL_MCP_STATE_DIR=/some/path.
State writes are flock-safe on POSIX and atomically replaced via
os.replace, so multiple agents pointing at the same state directory will
not corrupt each other. (Windows falls back to an in-process lock — fine
for a single MCP server, not designed for cross-process contention.)
python -m temporal_mcp gc # prune threads > 30d idle
python -m temporal_mcp gc 7 # prune threads > 7d idle
Not exposed as an MCP tool on purpose — a model that can prune its own memory of "when did we last talk" will eventually do it at exactly the wrong moment. Run it from cron if you care.
Thread keying is namespaced as {client_id}:{key}. Reserve a unique
client_id per surface so threads from claude.ai web don't collide with
a local Cursor session sharing the same state directory.
Failure is honest. If the state file is unreadable or the lock times
out, the snapshot returns available: false with an error field and
the header says gap: unknown. It does not silently lie and call it
a fresh thread — a model that thinks every turn is fresh will keep
saying good morning forever.
Watchdog. tick() runs in a daemon thread with a 100 ms timeout so
a stalled state read can't block your hook budget. If it times out, you
get the honest-failure snapshot above.
No HTTP transport in 0.1. Stdio only — that's what Claude Desktop, Cursor, and the other major MCP clients actually use. HTTP/SSE can land in 0.2 if there's demand.
Mcp-Session-Id and friends, configurable timezone overrideresume: true flag past N
hours) so agents can branch on resumed sessions without doing the math
themselvesMIT. See LICENSE.
Built by Garret Sutherland / MirrorEthic LLC, extracted from the temporal layer of a larger cognitive-mesh project where this primitive was load-bearing enough to deserve its own package.
mcp-name: io.github.MirrorEthic/temporal-mcp
FAQs
Temporal grounding for LLM agents: per-thread elapsed time, day rollover, and resume detection as an MCP server.
We found that temporal-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.