citadeldb-mcp
mcp-name: dev.citadeldb/mcp
Model Context Protocol (MCP) server for the Citadel encrypted memory engine. Gives any MCP client (Claude Desktop, an IDE, an agent) persistent, encrypted memory.
Memory lives in a local citadeldb-mem region:
AES-256 encrypted at rest, per-atom sealed and HMAC-authenticated, recalled through a hybrid
vector + keyword + recency + importance fusion over a PRISM approximate nearest-neighbor index,
connected by a typed edge graph, and forgotten by destroying keys (cryptographic erasure).
Install
Run it with no install (keyword-only recall - works immediately, no downloads):
uvx citadeldb-mcp --db memory.cdl
For the best recall (recommended - this is the benchmark config): pull the semantic embedder and the cross-encoder reranker once, then enable both:
uvx citadeldb-mcp pull e5-large
uvx citadeldb-mcp pull ms-marco-minilm
uvx citadeldb-mcp --db memory.cdl --embedder e5-large --reranker ms-marco-minilm
e5-large + ms-marco-minilm is the highest-recall setup and the exact config behind the
memory benchmark numbers. Models are never downloaded automatically.
Or install the command with pip install citadeldb-mcp or cargo install citadeldb-mcp,
then wire it into Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"citadel": {
"command": "citadeldb-mcp",
"args": ["--db", "memory.cdl", "--embedder", "e5-large", "--reranker", "ms-marco-minilm"],
"env": { "CITADEL_KEY": "your-passphrase" }
}
}
}
Tools (over a synchronous, hand-rolled JSON-RPC 2.0 stdio transport):
mem_recall- hybrid retrieval (vector + keyword + recency + importance); filter by kind/payload, expand along the memory graph, override fusion weights, and optionally attach provenance (derived_from), per-hit integrity verdicts (attest), andresource_links to each hitmem_fetch- deterministic listing of a kind (no embedding)mem_edges- typed graph introspectionmem_profile- what the memory knows about a query: recall plus its graph neighborhoodmem_summarize- per-kind digest of a regionmem_verify- re-authenticate atoms off disk: per-atom integrity verdict (authentic / tampered / key_erased / missing / plaintext_unattested)mem_remember/mem_remember_batch- store atoms with payload, importance, TTL, immutabilitymem_update- replace a stored atom's payload in place (preserves id, edges, and embedding)mem_link- connect atoms with a typed edgemem_evolve- recompute an atom's neighbor links and scoremem_evict- selective forgetting by policy (cryptographic erasure on encrypted regions)mem_forget- forget atoms by id and return a verifiable erasure receipt (cryptographic erasure on encrypted regions; skips immutable atoms unless forced)
The citadeldb-mcp binary reads the passphrase from CITADEL_KEY and serves one region
(encrypted by default); only protocol messages go to stdout, diagnostics to stderr.
Recall is keyword-only (a mock embedder) until you enable a semantic model. The (CPU) Candle
embedder is compiled into the default build; models are fetched only on explicit pull,
never automatically. e5-large + the ms-marco-minilm reranker (shown above) is the
recommended, highest-recall setup.
Embedder pull names: e5-large (recommended), e5-large-v2, bge-small, bge-base,
bge-large, minilm. Reranker: ms-marco-minilm. Or point --model-dir at a
local model directory for a fully offline setup, and build with --features cuda-embed to run
on an NVIDIA GPU.
This crate is part of the Citadel workspace.
License
Apache-2.0
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distributions
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file citadeldb_mcp-1.15.0.tar.gz.
File metadata
- Download URL: citadeldb_mcp-1.15.0.tar.gz
- Upload date:
- Size: 1.1 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
95a63bb70c735d57fb8898c822ec9c61118bfd1cd9fe9a65b9620c2c011e8ca7
|
|
| MD5 |
fa352b40d7e2438104de97c08df2c393
|
|
| BLAKE2b-256 |
df24b4a90e7aea04976b758153095552013565104b6a72a15c6023ba6a1b54f9
|
Provenance
The following attestation bundles were made for citadeldb_mcp-1.15.0.tar.gz:
Publisher:
release-mcp.yml on yp3y5akh0v/citadel
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
citadeldb_mcp-1.15.0.tar.gz -
Subject digest:
95a63bb70c735d57fb8898c822ec9c61118bfd1cd9fe9a65b9620c2c011e8ca7 - Sigstore transparency entry: 2408398341
- Sigstore integration time:
-
Permalink:
yp3y5akh0v/citadel@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Branch / Tag:
refs/tags/v1.15.0 - Owner: https://github.com/yp3y5akh0v
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-mcp.yml@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Trigger Event:
push
-
Statement type:
File details
Details for the file citadeldb_mcp-1.15.0-py3-none-win_amd64.whl.
File metadata
- Download URL: citadeldb_mcp-1.15.0-py3-none-win_amd64.whl
- Upload date:
- Size: 7.8 MB
- Tags: Python 3, Windows x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
57361c7aac4423a7833933fb29c9bf9cace50d62f8a62bae1cee6b58ee15729b
|
|
| MD5 |
af244b4116d251c21c518f2fff0613de
|
|
| BLAKE2b-256 |
65cdd160c3f9b2eefcb11c0ff862940196af5f8bcb24f8f71d703d83ca478a09
|
Provenance
The following attestation bundles were made for citadeldb_mcp-1.15.0-py3-none-win_amd64.whl:
Publisher:
release-mcp.yml on yp3y5akh0v/citadel
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
citadeldb_mcp-1.15.0-py3-none-win_amd64.whl -
Subject digest:
57361c7aac4423a7833933fb29c9bf9cace50d62f8a62bae1cee6b58ee15729b - Sigstore transparency entry: 2408398696
- Sigstore integration time:
-
Permalink:
yp3y5akh0v/citadel@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Branch / Tag:
refs/tags/v1.15.0 - Owner: https://github.com/yp3y5akh0v
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-mcp.yml@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Trigger Event:
push
-
Statement type:
File details
Details for the file citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.
File metadata
- Download URL: citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
- Upload date:
- Size: 7.5 MB
- Tags: Python 3, manylinux: glibc 2.17+ x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dee13ad0009477d9a796da0ac47c7c158a2a5a85d4b42e079bb1eec659904cbe
|
|
| MD5 |
920a616b565b2acd8d499a3d43570a4f
|
|
| BLAKE2b-256 |
5f66ca32227a90ab8b7779b5229e22393520beae0c94d4ea594c63b0521db782
|
Provenance
The following attestation bundles were made for citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl:
Publisher:
release-mcp.yml on yp3y5akh0v/citadel
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl -
Subject digest:
dee13ad0009477d9a796da0ac47c7c158a2a5a85d4b42e079bb1eec659904cbe - Sigstore transparency entry: 2408398428
- Sigstore integration time:
-
Permalink:
yp3y5akh0v/citadel@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Branch / Tag:
refs/tags/v1.15.0 - Owner: https://github.com/yp3y5akh0v
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-mcp.yml@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Trigger Event:
push
-
Statement type:
File details
Details for the file citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.
File metadata
- Download URL: citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
- Upload date:
- Size: 6.9 MB
- Tags: Python 3, manylinux: glibc 2.17+ ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
c2aa28d6844e99ffbf527893ebc3e291becbf1661fb2fe5ba9d770d55167a130
|
|
| MD5 |
c9fd122ef9a9e3baaf2e58f1ee07d25a
|
|
| BLAKE2b-256 |
897a3c349d7ae5fe9fbec93be3ea707ec6ede4d14c6d622d4f315018eb01152b
|
Provenance
The following attestation bundles were made for citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl:
Publisher:
release-mcp.yml on yp3y5akh0v/citadel
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
citadeldb_mcp-1.15.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl -
Subject digest:
c2aa28d6844e99ffbf527893ebc3e291becbf1661fb2fe5ba9d770d55167a130 - Sigstore transparency entry: 2408398497
- Sigstore integration time:
-
Permalink:
yp3y5akh0v/citadel@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Branch / Tag:
refs/tags/v1.15.0 - Owner: https://github.com/yp3y5akh0v
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-mcp.yml@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Trigger Event:
push
-
Statement type:
File details
Details for the file citadeldb_mcp-1.15.0-py3-none-macosx_11_0_arm64.whl.
File metadata
- Download URL: citadeldb_mcp-1.15.0-py3-none-macosx_11_0_arm64.whl
- Upload date:
- Size: 6.7 MB
- Tags: Python 3, macOS 11.0+ ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
b14e36d6d25d4d321005d9ceb698fb6905f7462065b053cb1ded80883f35a16d
|
|
| MD5 |
5e7c05ff8a68102ba0ce03d3d5e30f95
|
|
| BLAKE2b-256 |
9669fdd025352b0dc3dec8e6850536f71055b360744c8a773bf63541cf634af5
|
Provenance
The following attestation bundles were made for citadeldb_mcp-1.15.0-py3-none-macosx_11_0_arm64.whl:
Publisher:
release-mcp.yml on yp3y5akh0v/citadel
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
citadeldb_mcp-1.15.0-py3-none-macosx_11_0_arm64.whl -
Subject digest:
b14e36d6d25d4d321005d9ceb698fb6905f7462065b053cb1ded80883f35a16d - Sigstore transparency entry: 2408398589
- Sigstore integration time:
-
Permalink:
yp3y5akh0v/citadel@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Branch / Tag:
refs/tags/v1.15.0 - Owner: https://github.com/yp3y5akh0v
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-mcp.yml@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Trigger Event:
push
-
Statement type:
File details
Details for the file citadeldb_mcp-1.15.0-py3-none-macosx_10_12_x86_64.whl.
File metadata
- Download URL: citadeldb_mcp-1.15.0-py3-none-macosx_10_12_x86_64.whl
- Upload date:
- Size: 7.3 MB
- Tags: Python 3, macOS 10.12+ x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
55da7bd837780bd90ff3ac29ca636db66fb87f3c0e12974fb2e945058c5c6cc9
|
|
| MD5 |
764c5c997135cbd5463f3adb58b1e235
|
|
| BLAKE2b-256 |
ef9bb3e063a0fdaba4438da1ab0e9d2dabf6235e9f9f6cd7f994311b17a565eb
|
Provenance
The following attestation bundles were made for citadeldb_mcp-1.15.0-py3-none-macosx_10_12_x86_64.whl:
Publisher:
release-mcp.yml on yp3y5akh0v/citadel
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
citadeldb_mcp-1.15.0-py3-none-macosx_10_12_x86_64.whl -
Subject digest:
55da7bd837780bd90ff3ac29ca636db66fb87f3c0e12974fb2e945058c5c6cc9 - Sigstore transparency entry: 2408398775
- Sigstore integration time:
-
Permalink:
yp3y5akh0v/citadel@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Branch / Tag:
refs/tags/v1.15.0 - Owner: https://github.com/yp3y5akh0v
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-mcp.yml@cb558ba4bd02d5c45d66ac1d9913b2aebdb0862e -
Trigger Event:
push
-
Statement type: