Skip to main content

Graph-MIND

Local-first memory for AI coding assistants. Verbatim storage, on your own PC: 88.8% on LongMemEval with zero model calls at write time.

Switch models; keep the memory.

A decision made in Claude Code on Monday, recalled from Codex on Wednesday

A real run, not a mock-up: python demo/record_demo.py records it from a fresh store.


What it is

Graph-MIND records every conversation you have with Claude Code, Codex and Claude Desktop, word for word, in a store on your own PC. When a question depends on the past, the model you are using calls Graph-MIND over MCP and gets back a few thousand tokens of the conversations that answer it.

  • Nothing is summarised or rewritten. Saving is a database write. No model call, no tokens.
  • Search is hybrid. Your words are embedded on your PC (multilingual MiniLM, no API) and fused with keyword search. Korean and English both work.
  • Capture is automatic. A background service reads each app's local transcripts, masks secrets, stores the turns and embeds them as they arrive.
  • One memory across your PCs. One sentence to the AI on the first PC, one command on the others (see below).
  • No cloud of its own. No account, no telemetry; the memory stays on your machines. What leaves them is what your AI app already sends: the recalled turns go to your model's provider with your question.

Benchmarks

All numbers below come from files in this repository: the pre-registrations, each question's answer, and the judge's verdict on it, under runs/. The method is in REPORT.md, including the failures and the corrections.

LongMemEval_S: answer accuracy, 500 questions. The answer model is gpt-5-mini; the judge is the official gpt-4o-2024-08-06.

accuracy model tokens at write time packet read per question
All 500 questions 88.8% (444/500) 0 3.4k tokens
The 380 never used for tuning 86.8% (330/380) 0 3.4k tokens

Head to head: same 40 questions, same answer model, prompt and judge. The run was pre-registered with code hashes; nobody had tuned on these questions.

system accuracy model tokens at write time, per question
Graph-MIND (shipped path, earlier 20-item packet) 85.0% 0
MemPalace 3.10.0 57.5% 0
Mem0 2.2.1 (open source, latest on PyPI) 52.5% ~640k

Graph-MIND's lead over both is significant (exact McNemar p = 0.002 and 0.003).

Reading other published numbers. They measure different things, so they do not compare directly with the tables above:

  • MemPalace's 96.6% is retrieval recall (R@5): is the right session among the five returned? This table measures whether the final answer is correct.
  • Mem0's 94.4% is its managed cloud platform, which includes proprietary components. The open source package tested here is a different system.
  • Mastra (94.87%), Emergence (86%), Supermemory (85.2%) and Zep (71.2%) report their own setups and answer models. They were not reproduced here.

As far as we know, everything above 85% on that list runs a model over your conversations when it saves them. Graph-MIND does not.


Install

Requires Python 3.10+ (64-bit). Windows, macOS or Linux. Hosting a brain that other PCs join needs Python 3.12 or older on that one PC (its Postgres helper, pgserver, has no newer build yet); everything else, joining included, works on 3.13 and 3.14 too.

pip install graph-mind-memory
graph-mind-install

If graph-mind-install is "not recognized", pip put it in a Scripts folder that is not on your PATH (common with the Windows Python install manager). python -m install runs the same thing. If it stops with WinError 1114 loading c10.dll, Windows is missing the Microsoft Visual C++ runtime that PyTorch needs: install vc_redist.x64.exe, restart, and run the installer again.

or from source:

git clone https://github.com/goyohan0611-png/graph-mind.git
cd graph-mind
python install.py

The installer:

  • installs the packages (PyTorch CPU is the large one, about 2 GB);
  • registers the MCP server with every app it finds: Claude Code, Claude Desktop (including the Microsoft Store build) and Codex;
  • starts the capture service at login (Windows Startup folder, a macOS LaunchAgent, or an XDG autostart entry on Linux);
  • downloads the embedding model.

Then restart your AI apps. The server is also listed in the MCP Registry as io.github.goyohan0611-png/graph-mind. Running the installer again is safe. Run it again if you move the folder.

To remove it: graph-mind-uninstall unregisters it from every app, removes the login item and stops the capture service. Your memory stays in ~/.graph-mind unless you add --purge. Then pip uninstall graph-mind-memory removes the program.


What it captures

app captured
Codex: terminal, VS Code, ChatGPT desktop's work mode every turn
Claude Code: terminal, VS Code, Claude desktop's Code tab every turn
Claude desktop: Cowork every turn
Claude desktop: chat what the model saves with brain_remember

Before anything is stored, these are masked: API keys, tokens from GitHub, AWS, Google and Slack, private keys, passwords inside URLs, values written after password: / api_key= / token:, and any long machine-random string even from a service no rule knows (by its randomness: 91% of random 20-64 character tokens caught; in 246,750 ordinary chat turns it fired 92 times, nearly all on real ids and tokens). Commit ids, hashes and UUIDs are kept, since you recall those on purpose.

There is no switch to keep keys: a recalled memory goes to your model's provider with the question, so a stored key would leave your PC the first time it is useful. To have Graph-MIND remember a key, tell it where the key is, not the key: "my OpenAI key is in 1Password, under Dev".

Only what you actually send is captured: the service reads each app's transcript, which is written after you press Enter, so a paste you delete before sending never reaches it. A plain password like hunter2 has no recognizable format and is not masked. To remove something,

just ask your AI: "delete the password I typed earlier". It lists masked candidates (wifi password is ****), deletes only the ones you pick, and the conversation about deleting is not saved. Or, from a terminal:

graph-mind-forget          # asks for the phrase without showing it, then confirms

Either way, what you pick is deleted from this PC and its search indexes, from the shared memory, and from your other PCs on their next sync; only ids are shared for that, never the text. Your AI app's own history (for Claude Code, ~/.claude/projects) is separate and is not touched.


MCP tools

tool what it does
brain_context a bounded packet of the past turns and memories that answer a request; recent=true for "where did we leave off?"
brain_recall look memories and captured turns up directly; entity= for everything about one thing, in order
brain_remember save a sourced memory or decision (secrets masked)
brain_folder where the memory lives; share it with your other PCs; reindex an imported backlog
brain_forget "delete the password I typed": lists masked candidates, deletes only what you pick, everywhere; the exchange itself is not saved
code_activity what changed in a project, file or symbol, and when (when a code folder is watched)

Six tools on purpose: every tool's description is read by the model on every turn, and similar tools get confused with each other. Version 0.1 had thirteen.


One memory across PCs

On the PC that holds the memory, tell its AI:

"Let my other PCs use this memory."

It replies with a connection code (gm1.…). On each other PC:

graph-mind-install --join gm1.…     # or: python install.py --join gm1.…

The memory then lives in a Postgres server on the first PC, which Graph-MIND sets up itself. Other PCs reach it over the local network in the office, or over Tailscale from anywhere. Each connection tries the addresses in turn and uses the first that answers.

Other PCs log in with a generated password, as a role that can reach only the memory database. The Windows firewall rule admits only the local network and Tailscale. The code contains the password: do not post it publicly.

A synced folder also works. Tell the AI "use my Google Drive's Graph-MIND folder as my memory" on each PC.


Reproducing the benchmarks

  1. Download longmemeval_s_cleaned.json from LongMemEval into external/longmemeval/.
  2. Set OPENAI_API_KEY for the answer model and the judge.
  3. Run the commands in REPORT.md §10.

A full 500-question run costs about US$3.

Tests

python -m unittest discover -p "test_*.py"

Known limits

  • For about the first half minute after an AI app starts, answers use word search only while the embedding model loads in the background (the first answer takes ~2.5 s instead of waiting out a 30-50 s load on a slow or synced disk). After that, questions take well under a second.
  • Daily use on Windows only so far. macOS and Linux pass the tests in CI but have not seen real use.
  • Capture follows each app's transcript format, which is not a public interface. An app update can stop capture until Graph-MIND is updated.
  • Multi-session questions are the weakest type at 80%. These are questions that count or combine facts across many conversations.
  • The repository still holds the research-phase experiments next to the product (see Repository layout); the installed package carries only the 22 product modules.

The full list is in REPORT.md §9.

Repository layout

files
Product (what pip install graph-mind-memory installs) graph_mind_mcp_server.py (MCP server), automatic_capture*.py (capture service), install.py, brain_log.py (sharing across PCs), forget.py (deleting), local_brain.py / conversation_memory.py / coding_memory.py / development_memory.py (stores), semantic_recall.py / local_embedder.py / vector_cache.py / embedding_warmup.py (search), and their helpers
Benchmarks product_answer_eval.py, official_judge_v073.py, rival_mem0.py, rival_mempalace.py, rival_clean_prereg.py, and the result files under runs/
Research phase the other modules: earlier extraction pipelines and analyses that REPORT.md cites
Tests test_*.py

Security

Graph-MIND holds your conversations. Report vulnerabilities privately (GitHub Security → Report a vulnerability); SECURITY.md lists what is in scope and how the data is handled.

Contributing

Issues and pull requests are welcome. Contributions are accepted under the CLA, which keeps the dual license possible.

License

AGPL-3.0. Anyone running a modified Graph-MIND as a network service, such as the memory behind a support chatbot, must publish that source. A commercial license is available for products that cannot.

Metadata

Release files for graph-mind-memory 0.3.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for graph-mind-memory 0.3.4
File Size Uploaded
graph_mind_memory-0.3.4.tar.gz 110.4 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for graph-mind-memory 0.3.4
File Interpreter ABI Platform
graph_mind_memory-0.3.4-py3-none-any.whl Python 3 none any Details

Total release size: 228.5 kB

Release files / graph_mind_memory-0.3.4.tar.gz

Download URL graph_mind_memory-0.3.4.tar.gz
Size 110.4 kB
Tags Source
SHA-256 checksum
How to use checksums
74ae55d64e679546182ae872c68fd08c1d15a2034d12209ff11bfbb69268c175
BLAKE2b-256 checksum
How to use checksums
adac9295135fb725a10723b102355c5a31d5958f66a0dd11895f769518f71c6e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.

Transparency log

Release files / graph_mind_memory-0.3.4-py3-none-any.whl

Download URL graph_mind_memory-0.3.4-py3-none-any.whl
Size 118.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
8130be7d9878e7e2781ab440a7079fb8748584b2b59a6741bddc08a0854ae514
BLAKE2b-256 checksum
How to use checksums
4d41aa520951babc2119b65e2798a2451cb073b56133e3a82817ae31cb6c45d6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.

Transparency log

Release history Release notifications | RSS feed

0.5.4

2 release files

0.5.3

2 release files

0.5.2

2 release files

0.5.1

2 release files

0.5.0

2 release files

0.4.0

2 release files

This release

0.3.4 This release

2 release files

0.3.3

2 release files

0.3.2

2 release files

0.3.1

2 release files

0.3.0

2 release files

0.2.1

2 release files

0.2.0

2 release files

0.1.5

2 release files

0.1.4

2 release files

0.1.3

2 release files

0.1.2

2 release files

0.1.1

2 release files

0.1.0

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page