mcp-memory-service

Special Thanks

12.6.0 carries work from a lot of contributors. Thank you to:

• orshih6, who reported GHSA-8p26-g7wp-65jw, the cross-origin and DNS-rebinding hole in unauthenticated local HTTP transports fixed in this release.
• timkjr for memory oauth list-clients and delete-client (#1863) and for the SQLite OAuth store finally enforcing its foreign keys (#1862).
• andrunio for rebuilding existing entity graphs (#1860).
• ZYZ666-RGB for marking beliefs and summaries stale when a source memory is deleted (#1865) and the Manage tab translations (#1851).
• samyferhat for the dashboard following the system color scheme (#1793).
• coughlmao for the Russian dashboard translation (#1854) and laozhej for the Korean site introduction (#1866).
• arifrhm for the dashboard restart fix under python -m uvicorn (#1864).
• Yoel-qin, hamid-digitalmarketer, ducanhnguyen223, ppcvote, shu-chen-dot-ca, Khushi6767 and qwist1233-cpu for the HTTP /mcp shim parity, the memory_graph annotation fix, the dark-mode flash, the versioned-update conflict fix, and a long run of dashboard translation fixes.

Highlights

• Security: unauthenticated local --streamable-http and --sse servers refuse cross-origin and DNS-rebinding requests (GHSA-8p26-g7wp-65jw). Upgrade if you run either transport on loopback without an API key or OAuth. Servers with an API key or OAuth keep their current behaviour.
• memory_quality(action="rebuild_entities") rebuilds existing entity graphs, with a preview by default.
• memory oauth list-clients and memory oauth delete-client replace editing oauth.db by hand.
• Deleting a memory no longer leaves beliefs and consolidation summaries citing it.
• Harvest no longer lets an older statement replace a newer memory.
• The dashboard follows the system theme, and adds Russian. The site gains a Korean introduction.

The full entry from CHANGELOG.md follows.

[12.6.0] - 2026-11-05

Added

• Rebuild existing entity graphs with memory_quality(action="rebuild_entities"), previewing changes by default and applying current extraction settings across all live memories on SQLite, Hybrid, and Milvus.
• The dashboard follows the system color scheme by default (#1737). It used to open in light mode whatever the OS was set to. A new System theme, the default for anyone who never picked one, tracks prefers-color-scheme and updates live when the OS switches. An explicit light or dark choice still wins, and the header toggle keeps flipping between light and dark. theme-init.js applies the same rule before first paint, so following a dark OS does not bring back the flash from #1705.
• memory oauth list-clients and memory oauth delete-client (#1804, timkjr). Registered OAuth clients, including ones that registered themselves through Dynamic Client Registration, could only be removed by editing oauth.db by hand. list-clients shows each client without its secret, with its newest refresh token still on record. delete-client asks for confirmation (--yes skips it) and removes the client with its authorization codes and tokens in one transaction. Access tokens already issued as JWTs stay valid until they expire, and while registration is open a deleted application can register again. Both storage backends gain list_clients() and delete_client().
• Add Russian language support to the web dashboard with a complete translation catalog, automatic language discovery, and regression tests (#1763).
• Added a Korean introduction to the project website, including setup guidance and language navigation.

Fixed

• Prevent a light-theme flash when the dashboard reloads in dark mode (#1705). A synchronous external initializer applies the saved theme before dashboard content is parsed; blocked or malformed storage keeps the default light theme.
• The SQLite OAuth store never enforced its foreign keys (#1804, timkjr). The schema declares ON DELETE CASCADE from autho

Python 3.10 is no longer supported

v12.5.0 requires Python 3.11 or newer (#1770). Python 3.10 reached end of life on October 1, 2026 and cannot install the patched filelock releases. If you are on 3.10, upgrade the interpreter and recreate your virtual environment before installing this release.

Special Thanks

This release has a lot of outside work in it. Thank you to @filhocf, @massimiliano1991, @andrunio, @timkjr, @Parth-Jadhav-2004, @ppcvote, @Sainath-Reddy7, @10RZC22, @qwist1233-cpu, @coughlmao, @Esmail-sarhadi, @debashishthakur, @djimenezm2, @mikemikimike, @juliasadler, @shu-chen-dot-ca, @shyam1017, @Neeraj111010, @aghiles-baha, @Yoel-qin, @hamid-digitalmarketer and @calude-bot.

Highlights

• Beliefs. Belief embeddings (migration 020), opt-in semantic dedup by embedding cosine, and the consolidation wiring that backfills and then dedups. Dedup is a dry run unless MCP_BELIEF_DEDUP_APPLY=true (#1728, #1733, #1771, @filhocf). Belief derivation now sees contradictions (#1657, @debashishthakur).
• Delta-sync in the dashboard. Peer destinations, scheduling, cycle results and errors in a panel, with automatic refresh after each cycle (#1555, #1557, @Parth-Jadhav-2004). The delta-sync event log is bounded by compacting update_metadata chains (#1721, @filhocf), and a supersede made after the first sync now propagates (#1773, @ppcvote).
• Search. Per-stage timing of the memory_search rerank path under include_debug, and MCP_QUALITY_LOCAL_DEVICE reaches the reranker (#1701, @massimiliano1991). Point-in-time queries with as_of work (#1724, @juliasadler). Superseded versions stay hidden in no-query search, tag search and memory_list on sqlite-vec and Milvus (#1805, #1824, @shu-chen-dot-ca).
• Milvus. Deleting a memory removes its graph edges, newest matches come back for no-query search, and full reads are no longer capped at 16,384 rows (#1703, #1708, #1782, #1785, @andrunio).
• Entities. MCP_ENTITY_TAG_INCLUDE and MCP_ENTITY_TAG_EXCLUDE choose which tags become entities (#1704, @andrunio).
• Log injection. The harvest, reasoning and auto-capture modules sanitize file names, entity names and exception text before logging (#1146, @massimiliano1991).
• Dashboard. A line chart for Memory Growth (#1740), readable error toasts, Hindi, Indonesian and Brazilian Portuguese catalogs, more complete Knowledge Graph translations in German, French, Spanish, Japanese and Korean, and the active view re-renders after a language switch.
• Website. New introductions in German, Spanish, French, Japanese, Brazilian Portuguese, Simplified Chinese and Traditional Chinese at https://mcpmemory.services.
• Removed. The standalone API overview page; /api-overview redirects to /api/docs (#1746).

The full list is in CHANGELOG.md.

Install: pip install mcp-memory-service==12.5.0, or docker pull doobidoo/mcp-memory-service:12.5.0.

Special Thanks

• camerono for per-store OAuth scopes (#1682)
• Forest537 for the Claude Code hooks inter-agent inbox (#1675)
• Parth-Jadhav-2004 for retiring the ChromaDB-era scripts (#1640)

Highlights

• Per-store OAuth scopes (read:<store>, write:<store>) and MCP_ANONYMOUS_SCOPE, with a per-client scope ceiling and store-confined SSE tickets.
• Delta-sync peers negotiate protocol, event schema and embedding identity before exchanging events.
• Opt-in inter-agent inbox in the Claude Code hooks (plugin manifest 1.2.0).
• Optional rerank flag on memory_search, and an experimental resonance-search endpoint.
• Re-sending deleted content is refused unless restore_deleted is set.

Per-store scopes: where they work

Per-store scopes (read:<store>, write:<store>, MCP_ANONYMOUS_SCOPE=read:<store>) work on sqlite_vec and hybrid only. cloudflare, milvus and remote_http refuse store-restricted credentials until #1683. Tools that are not confined to a store, including memory_explore, memory_detail and memory_quality, need the global scope.

Changelog

Added

• Negotiate peer compatibility before scheduled delta-sync (#1505). A read-authenticated capabilities endpoint advertises the delta-sync protocol range, event-envelope schema, embedding identity, and package version. Scheduled peers stop before exchanging events when they have no common protocol, a different event schema or embedding identity, or do not advertise capabilities; /api/sync/status exposes each peer's latest result. /api/health/model identifies hash-fallback embeddings so an HTTP hybrid secondary refuses to start against a degraded hub instead of mistaking it for the configured model.
• Claude Code hooks: an opt-in inter-agent inbox (#1526, Forest537). docs/agents/README.md documents agents using one memory service as a message bus via a sentinel tag (msg:cluster), but the reading side was entirely manual — nothing polled, nothing remembered what had been read. The hooks now poll the configured tags on session start and on prompts (throttled by inbox.checkIntervalMinutes, and by the state file rather than an in-memory cooldown, since every hook invocation is a fresh process) and inject the new messages as their own block. The last-seen marker advances only after a successful query. Per #1599 the marker throttles but does not gate delivery: each check queries from marker - inbox.overlapMinutes and drops rows already delivered by content_hash, so a message that reaches the store after a check while carrying an older created_at — the normal case under delta sync, and the clock-skew case — is still delivered, exactly once. Off by default; the config keys and the output format match the OpenCode client (#1527/#1541/#1636).
• Expose Delta-Sync settings in the Environment tab (#1556). The web configuration now lists the sync event log, schedule, peers, and push allow-list while masking peer API and basic-auth credentials.
• Add an opt-in rerank flag to memory_search: a second-stage ONNX cross-encoder reorders the top MCP_RERANK_CANDIDATES results when MCP_RERANK_ENABLED is set, fails open to the unreranked order, and never touches the default path.
• Apple Foundation Models work as a local LLM provider on macOS 27: point the OpenAI-compatible quality scorer or the harvest provider chain at fm serve. The three OpenAI-compatible call sites (quality scorer, harvest rewriter, harvest classifier) now send "stream": false explicitly, because fm serve streams by default and the requests used to fall through to the next provider. New guide: docs/guides/apple-foundation-models.md (#1666).
• Experimental POST /api/memories/resonance-search: ranks memories by wave interference instead of cosine similarity, after the ResonanceDB approach in arXiv:2509.09691. It converts the stored embeddings to complex waveforms at query time, so no schema change. Modes resonance, phase and hybrid (d

Security update

Refresh the independent TLS trust stores affected by the eMudhra CA compromise. Updating the application alone does not update pip, uv, operating-system certificates or custom CA bundles. Bootstrap package-manager upgrades through an already corrected trust store; certificate validation must stay enabled.

Trust-store update guide

Fixed

• Refresh independent TLS trust stores after the eMudhra CA compromise. CI and Docker bootstrap now require pip 26.2.2 and uv 0.13.4 or newer. The lite package and hand-curated Docker dependencies require certifi 2026.10.19, matching the main package. Docker builds reject the affected root certificates before bootstrapping pip and after installing application dependencies; CI builds both standard and slim images. Existing installations must also update their package managers, operating system certificates, and any custom trust bundles.