citadeldb-mcp

mcp-name: dev.citadeldb/mcp

Model Context Protocol (MCP) server for the Citadel encrypted memory engine. Gives any MCP client (Claude Desktop, an IDE, an agent) persistent, encrypted memory.

Memory lives in a local citadeldb-mem region: AES-256 encrypted at rest, per-atom sealed and HMAC-authenticated, recalled through a hybrid vector + keyword + recency + importance fusion over a PRISM approximate nearest-neighbor index, connected by a typed edge graph, and forgotten by destroying keys (cryptographic erasure).

Install

Run it with no install (keyword-only recall - works immediately, no downloads):

uvx citadeldb-mcp --db memory.cdl

For the best recall (recommended - this is the benchmark config): pull the semantic embedder and the cross-encoder reranker once, then enable both:

uvx citadeldb-mcp pull e5-large
uvx citadeldb-mcp pull ms-marco-minilm
uvx citadeldb-mcp --db memory.cdl --embedder e5-large --reranker ms-marco-minilm

e5-large + ms-marco-minilm is the highest-recall setup and the exact config behind the memory benchmark numbers. Models are never downloaded automatically.

Or install the command with pip install citadeldb-mcp or cargo install citadeldb-mcp, then wire it into Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "citadel": {
      "command": "citadeldb-mcp",
      "args": ["--db", "memory.cdl", "--embedder", "e5-large", "--reranker", "ms-marco-minilm"],
      "env": { "CITADEL_KEY": "your-passphrase" }
    }
  }
}

Tools (over a synchronous, hand-rolled JSON-RPC 2.0 stdio transport):

mem_recall - hybrid retrieval (vector + keyword + recency + importance); filter by kind/payload, expand along the memory graph, override fusion weights, and optionally attach provenance (derived_from), per-hit integrity verdicts (attest), and resource_links to each hit
mem_fetch - deterministic listing of a kind (no embedding)
mem_edges - typed graph introspection
mem_profile - what the memory knows about a query: recall plus its graph neighborhood
mem_summarize - per-kind digest of a region
mem_verify - re-authenticate atoms off disk: per-atom integrity verdict (authentic / tampered / key_erased / missing / plaintext_unattested)
mem_remember / mem_remember_batch - store atoms with payload, importance, TTL, immutability
mem_update - replace a stored atom's payload in place (preserves id, edges, and embedding)
mem_link - connect atoms with a typed edge
mem_evolve - recompute an atom's neighbor links and score
mem_evict - selective forgetting by policy (cryptographic erasure on encrypted regions)
mem_forget - forget atoms by id and return a verifiable erasure receipt (cryptographic erasure on encrypted regions; skips immutable atoms unless forced)

The citadeldb-mcp binary reads the passphrase from CITADEL_KEY and serves one region (encrypted by default); only protocol messages go to stdout, diagnostics to stderr.

Recall is keyword-only (a mock embedder) until you enable a semantic model. The (CPU) Candle embedder is compiled into the default build; models are fetched only on explicit pull, never automatically. e5-large + the ms-marco-minilm reranker (shown above) is the recommended, highest-recall setup.

Embedder pull names: e5-large (recommended), e5-large-v2, bge-small, bge-base, bge-large, minilm. Reranker: ms-marco-minilm. Or point --model-dir at a local model directory for a fully offline setup, and build with --features cuda-embed to run on an NVIDIA GPU.

This crate is part of the Citadel workspace.

License

MIT OR Apache-2.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

citadeldb_mcp-1.13.0.tar.gz (1.1 MB view details)

Uploaded Jul 9, 2026 Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

citadeldb_mcp-1.13.0-py3-none-win_amd64.whl (7.7 MB view details)

Uploaded Jul 9, 2026 Python 3Windows x86-64

citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (7.4 MB view details)

Uploaded Jul 9, 2026 Python 3manylinux: glibc 2.17+ x86-64

citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (6.9 MB view details)

Uploaded Jul 9, 2026 Python 3manylinux: glibc 2.17+ ARM64

citadeldb_mcp-1.13.0-py3-none-macosx_11_0_arm64.whl (6.6 MB view details)

Uploaded Jul 9, 2026 Python 3macOS 11.0+ ARM64

citadeldb_mcp-1.13.0-py3-none-macosx_10_12_x86_64.whl (7.2 MB view details)

Uploaded Jul 9, 2026 Python 3macOS 10.12+ x86-64

File details

Details for the file citadeldb_mcp-1.13.0.tar.gz.

File metadata

Download URL: citadeldb_mcp-1.13.0.tar.gz
Upload date: Jul 9, 2026
Size: 1.1 MB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for citadeldb_mcp-1.13.0.tar.gz
Algorithm	Hash digest
SHA256	`d7f11bdc7b2acbc2aba68663fd3a3f8cf82bbe071f329b9b43a85e3f6a6560c7`
MD5	`f838b21c8e45b78335cc3688ac28ceec`
BLAKE2b-256	`e8c13e2013449ffb83bd332c9f244027a4c3e9708d07db4a58470f6d262b7c3d`

See more details on using hashes here.

Provenance

The following attestation bundles were made for citadeldb_mcp-1.13.0.tar.gz:

Publisher: release-mcp.yml on yp3y5akh0v/citadel

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: citadeldb_mcp-1.13.0.tar.gz
- Subject digest: d7f11bdc7b2acbc2aba68663fd3a3f8cf82bbe071f329b9b43a85e3f6a6560c7
- Sigstore transparency entry: 2129403943
- Sigstore integration time: Jul 9, 2026
Source repository:
- Permalink: yp3y5akh0v/citadel@76ad4f59e8e541f399e48555d48da75ab5763166
- Branch / Tag: refs/tags/v1.13.0
- Owner: https://github.com/yp3y5akh0v
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-mcp.yml@76ad4f59e8e541f399e48555d48da75ab5763166
- Trigger Event: push

File details

Details for the file citadeldb_mcp-1.13.0-py3-none-win_amd64.whl.

File metadata

Download URL: citadeldb_mcp-1.13.0-py3-none-win_amd64.whl
Upload date: Jul 9, 2026
Size: 7.7 MB
Tags: Python 3, Windows x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for citadeldb_mcp-1.13.0-py3-none-win_amd64.whl
Algorithm	Hash digest
SHA256	`544ef98b3de1e490422667982ef9ca5e60903a80941c52c7db5935ff7bd81b32`
MD5	`b500a41083fa84b772e12b07426682fb`
BLAKE2b-256	`551e8f51ae6d6fc49dbbdad6f46a3e696b664b18a4fded64c0164dfd46e68a24`

See more details on using hashes here.

Provenance

The following attestation bundles were made for citadeldb_mcp-1.13.0-py3-none-win_amd64.whl:

Publisher: release-mcp.yml on yp3y5akh0v/citadel

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: citadeldb_mcp-1.13.0-py3-none-win_amd64.whl
- Subject digest: 544ef98b3de1e490422667982ef9ca5e60903a80941c52c7db5935ff7bd81b32
- Sigstore transparency entry: 2129405807
- Sigstore integration time: Jul 9, 2026
Source repository:
- Permalink: yp3y5akh0v/citadel@76ad4f59e8e541f399e48555d48da75ab5763166
- Branch / Tag: refs/tags/v1.13.0
- Owner: https://github.com/yp3y5akh0v
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-mcp.yml@76ad4f59e8e541f399e48555d48da75ab5763166
- Trigger Event: push

File details

Details for the file citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

Download URL: citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Upload date: Jul 9, 2026
Size: 7.4 MB
Tags: Python 3, manylinux: glibc 2.17+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm	Hash digest
SHA256	`2af581a828660123d334515d2ebb4fec8cd1d5bd6753758230e7a1d7f46b723e`
MD5	`f361616abbce236d767b150883cc70e4`
BLAKE2b-256	`8301eb044f16127bf3a30fc3ba4c74683c15ae2f530b6c3474da73cddbb677d4`

See more details on using hashes here.

Provenance

The following attestation bundles were made for citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl:

Publisher: release-mcp.yml on yp3y5akh0v/citadel

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
- Subject digest: 2af581a828660123d334515d2ebb4fec8cd1d5bd6753758230e7a1d7f46b723e
- Sigstore transparency entry: 2129406421
- Sigstore integration time: Jul 9, 2026
Source repository:
- Permalink: yp3y5akh0v/citadel@76ad4f59e8e541f399e48555d48da75ab5763166
- Branch / Tag: refs/tags/v1.13.0
- Owner: https://github.com/yp3y5akh0v
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-mcp.yml@76ad4f59e8e541f399e48555d48da75ab5763166
- Trigger Event: push

File details

Details for the file citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.

File metadata

Download URL: citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Upload date: Jul 9, 2026
Size: 6.9 MB
Tags: Python 3, manylinux: glibc 2.17+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Algorithm	Hash digest
SHA256	`df831b6bd34f3af2590289c6d56dd13e1f96d0ee0e957dab36ab46c842c9fd6d`
MD5	`445207f1a12d53e3203048affdcf9f97`
BLAKE2b-256	`fc77a04289bb6a5dd41782b32a83ed6475b741e32ea05e0f55d90c839fc5763d`

See more details on using hashes here.

Provenance

The following attestation bundles were made for citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl:

Publisher: release-mcp.yml on yp3y5akh0v/citadel

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: citadeldb_mcp-1.13.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
- Subject digest: df831b6bd34f3af2590289c6d56dd13e1f96d0ee0e957dab36ab46c842c9fd6d
- Sigstore transparency entry: 2129406149
- Sigstore integration time: Jul 9, 2026
Source repository:
- Permalink: yp3y5akh0v/citadel@76ad4f59e8e541f399e48555d48da75ab5763166
- Branch / Tag: refs/tags/v1.13.0
- Owner: https://github.com/yp3y5akh0v
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-mcp.yml@76ad4f59e8e541f399e48555d48da75ab5763166
- Trigger Event: push

File details

Details for the file citadeldb_mcp-1.13.0-py3-none-macosx_11_0_arm64.whl.

File metadata

Download URL: citadeldb_mcp-1.13.0-py3-none-macosx_11_0_arm64.whl
Upload date: Jul 9, 2026
Size: 6.6 MB
Tags: Python 3, macOS 11.0+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for citadeldb_mcp-1.13.0-py3-none-macosx_11_0_arm64.whl
Algorithm	Hash digest
SHA256	`1601eaf8ca905c658bf633039608c1d78bbb7e9835d58806e49bd0bcdb72abc8`
MD5	`83d810c896ffbe6d747327b234a6e8c7`
BLAKE2b-256	`660c8fb986e5e6429879f31a72a74548535652adfcf87430e1fb7bb681f277bc`

See more details on using hashes here.

Provenance

The following attestation bundles were made for citadeldb_mcp-1.13.0-py3-none-macosx_11_0_arm64.whl:

Publisher: release-mcp.yml on yp3y5akh0v/citadel

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: citadeldb_mcp-1.13.0-py3-none-macosx_11_0_arm64.whl
- Subject digest: 1601eaf8ca905c658bf633039608c1d78bbb7e9835d58806e49bd0bcdb72abc8
- Sigstore transparency entry: 2129405383
- Sigstore integration time: Jul 9, 2026
Source repository:
- Permalink: yp3y5akh0v/citadel@76ad4f59e8e541f399e48555d48da75ab5763166
- Branch / Tag: refs/tags/v1.13.0
- Owner: https://github.com/yp3y5akh0v
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-mcp.yml@76ad4f59e8e541f399e48555d48da75ab5763166
- Trigger Event: push

File details

Details for the file citadeldb_mcp-1.13.0-py3-none-macosx_10_12_x86_64.whl.

File metadata

Download URL: citadeldb_mcp-1.13.0-py3-none-macosx_10_12_x86_64.whl
Upload date: Jul 9, 2026
Size: 7.2 MB
Tags: Python 3, macOS 10.12+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for citadeldb_mcp-1.13.0-py3-none-macosx_10_12_x86_64.whl
Algorithm	Hash digest
SHA256	`9de7da945d3960f70235a29af62c966d4bd5d7e701e004b99288f31c0ca1c419`
MD5	`a331cae119d07fcfc3ab378ac80cd6bd`
BLAKE2b-256	`ccbf24f5652c2e2942f0fe08d59392a9acbec3a4c590d9d3570b6edb2446be44`

See more details on using hashes here.

Provenance

The following attestation bundles were made for citadeldb_mcp-1.13.0-py3-none-macosx_10_12_x86_64.whl:

Publisher: release-mcp.yml on yp3y5akh0v/citadel

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: citadeldb_mcp-1.13.0-py3-none-macosx_10_12_x86_64.whl
- Subject digest: 9de7da945d3960f70235a29af62c966d4bd5d7e701e004b99288f31c0ca1c419
- Sigstore transparency entry: 2129404883
- Sigstore integration time: Jul 9, 2026
Source repository:
- Permalink: yp3y5akh0v/citadel@76ad4f59e8e541f399e48555d48da75ab5763166
- Branch / Tag: refs/tags/v1.13.0
- Owner: https://github.com/yp3y5akh0v
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-mcp.yml@76ad4f59e8e541f399e48555d48da75ab5763166
- Trigger Event: push

Release history Release notifications | RSS feed

1.15.0

Aug 10, 2026

1.14.0

Aug 7, 2026

This release

1.13.0

Jul 9, 2026

1.12.0

Jul 4, 2026

1.11.0

Jul 3, 2026

citadeldb-mcp 1.13.0

citadeldb-mcp

Install

License

Project links

Key dates

1 maintainer

Credits

GitHub Statistics

License expression

Requires

Download files

Source Distribution

Built Distributions

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

Release history Release notifications | RSS feed