Skip to main content

Production-grade persistence backends for the MCP Python SDK

Project description

mcp-persist

CI PyPI Python versions License: MIT

The MCP Python SDK currently provides only an in-memory EventStore. mcp-persist provides drop-in durable EventStore implementations for SQLite, Redis, and PostgreSQL.

This allows real deployments to survive process restarts and scale across multi-worker environments while retaining SSE stream resumability.

MCP Server
     │
     ▼
StreamableHTTPSessionManager
     │
     ▼
EventStore
 ├─ SQLite
 ├─ Redis
 └─ PostgreSQL

Backends

Backend Extra Use case
SQLiteEventStore sqlite Single-process SSE resumability across restarts, with no external service
RedisEventStore redis Multi-process / multi-worker SSE resumability
PostgresEventStore postgres Durable resumability for deployments already running Postgres, including multi-node / team setups

Choosing a backend

Start from how you deploy:

If your deployment… Use
Runs as a single process and you want zero extra infrastructure SQLiteEventStore
Runs multiple workers / replicas behind a load balancer RedisEventStore
Already runs PostgreSQL, or needs durable storage at team / multi-node scale PostgresEventStore

How they compare:

SQLite Redis Postgres
External service None Redis PostgreSQL
Multi-process / multi-worker No (single writer) Yes Yes
Durable across restarts Yes (on disk) Depends on Redis persistence config Yes
Automatic expiry No — call purge_expired() Yes (native key TTL) No — call purge_expired()
Best fit Single node, edge, local dev Load-balanced / ephemeral fan-out Teams already running Postgres

See Benchmarks for latency and throughput characteristics.

Installation

# SQLite backend (no external service needed)
pip install "mcp-persist[sqlite]"

# Redis backend
pip install "mcp-persist[redis]"

# Postgres backend
pip install "mcp-persist[postgres]"

# Multiple backends
pip install "mcp-persist[sqlite,redis,postgres]"

Quickstart

SQLite

import aiosqlite
from mcp.server.fastmcp import FastMCP
from mcp.server.streamable_http_manager import StreamableHTTPSessionManager
from mcp_persist import SQLiteEventStore

mcp = FastMCP(name="MyServer")

conn = await aiosqlite.connect("events.db")
store = SQLiteEventStore(conn, ttl=3600)  # 1 hour TTL
await store.initialize()

session_manager = StreamableHTTPSessionManager(
    app=mcp._mcp_server,  # the low-level Server that FastMCP wraps
    event_store=store,
)

Redis

import redis.asyncio as aioredis
from mcp.server.fastmcp import FastMCP
from mcp.server.streamable_http_manager import StreamableHTTPSessionManager
from mcp_persist import RedisEventStore

mcp = FastMCP(name="MyServer")

redis_client = aioredis.from_url("redis://localhost:6379")
store = RedisEventStore(redis_client, ttl=3600)  # 1 hour TTL

session_manager = StreamableHTTPSessionManager(
    app=mcp._mcp_server,  # the low-level Server that FastMCP wraps
    event_store=store,
)

Postgres

import asyncpg
from mcp.server.fastmcp import FastMCP
from mcp.server.streamable_http_manager import StreamableHTTPSessionManager
from mcp_persist import PostgresEventStore

mcp = FastMCP(name="MyServer")

pool = await asyncpg.create_pool("postgresql://localhost/mydb")
store = PostgresEventStore(pool, ttl=3600)  # 1 hour TTL
await store.initialize()

session_manager = StreamableHTTPSessionManager(
    app=mcp._mcp_server,  # the low-level Server that FastMCP wraps
    event_store=store,
)

SQLiteEventStore

Stores MCP SSE events in a SQLite database so a single-process server can resume interrupted streams across restarts and redeploys — without running Redis or any other external service. Ideal for single-node deployments, local development, and edge/embedded hosts.

For load-balanced or multi-worker deployments, use RedisEventStore instead — SQLite is single-writer and not designed for shared multi-process access. Multiple processes writing the same database file contend on SQLite's file lock and will surface SQLITE_BUSY / "database is locked" errors.

How it works

One row per event:

{table}.event_id    — INTEGER PRIMARY KEY AUTOINCREMENT, monotonic event IDs (never reused)
{table}.stream_id   — TEXT, the stream the event belongs to
{table}.payload     — TEXT, serialized JSONRPCMessage ("" for priming events)
{table}.created_at  — REAL, unix timestamp used for TTL expiry
  • Monotonic IDs via AUTOINCREMENT — strictly increasing, never reused, same guarantee as Redis INCR
  • Indexed replayWHERE stream_id = ? AND event_id > ? over a (stream_id, event_id) index
  • Durable across restarts — WAL journaling; events survive process exit
  • TTL support — expired events are skipped on replay and removed by purge_expired()
  • Multi-tenant isolation via configurable table_name
  • Priming event handling — sentinel empty-string payloads are stored but never replayed

Configuration

SQLiteEventStore(
    conn,                   # an open aiosqlite.Connection
    table_name="mcp_events",  # isolate multiple servers in one database file
    ttl=3600,               # seconds; None = never expire (not recommended)
)

TTL note: SQLite has no automatic key expiry. Events past ttl are skipped on replay, but to reclaim disk space call await store.purge_expired() periodically (e.g. from a background task). It returns the number of rows deleted.

Multi-tenant deployments

If multiple MCP servers share a database file, use different table names:

store_a = SQLiteEventStore(conn, table_name="server_a")
store_b = SQLiteEventStore(conn, table_name="server_b")

RedisEventStore

Stores MCP SSE events in Redis so clients can resume interrupted streams — even across worker restarts or load-balanced deployments.

How it works

Redis data layout:

{prefix}counter                 — atomic INCR source for monotonic event IDs (never expires)
{prefix}event:{event_id}        — HASH: stream_id + serialized payload
{prefix}stream:{stream_id}      — ZSET: event IDs sorted by score for O(log N) range queries
  • Atomic monotonic IDs via Redis INCR — collision-free across concurrent workers. The counter is never given a TTL (even when ttl is set), so IDs stay monotonic across idle periods; only the event and stream keys expire.
  • Replay is O(log N + M) — one ZRANGEBYSCORE range-scans the stream's sorted set, then each of the M matched events is fetched with its own HGET. That's one network round-trip per replayed event: fine for typical resume sizes, worth knowing for very long streams.
  • TTL support — automatic expiry of event/stream keys to prevent unbounded memory growth
  • Atomic writes — each event's hash, sorted-set entry, and TTLs are written in a single transactional pipeline, so a mid-write crash can't orphan a hash or leave a key without its expiry
  • Multi-tenant isolation via configurable key_prefix
  • Priming event handling — sentinel empty-string payloads are stored but never replayed to clients

Configuration

RedisEventStore(
    redis,                  # redis.asyncio.Redis instance
    key_prefix="mcp:",      # isolate multiple servers on one Redis instance
    ttl=3600,               # seconds; None = never expire (not recommended)
    max_stream_length=None, # optional cap on how many event IDs each stream retains
)
  • TTL guidance: Set ttl to at least 2× your session idle timeout. If you leave it as None, a warning is logged and events accumulate indefinitely.
  • Stream bounds (max_stream_length): Set a positive integer to cap the size of each stream's sorted set. The oldest event IDs beyond this limit are automatically trimmed on every write, preventing unbounded memory growth on long-lived streams.

Production Note: Stream Cardinality & Redis Memory Growth

When scaling to millions of unique stream IDs, Redis accumulates:

  • One {prefix}event:{event_id} HASH key per event.
  • One {prefix}stream:{stream_id} ZSET key per stream.
  • A global {prefix}counter string (never expires, preserving ID monotonicity).

While event hashes and stream ZSETs expire automatically when ttl is set, a massive rate of unique stream creation (e.g., one-off clients) can accumulate many ZSET keys in memory within the TTL window.

Best Practices:

  1. Always configure a TTL to ensure inactive streams and their events are automatically evicted.
  2. Use a Volatile Eviction Policy: Configure Redis with volatile-lru or volatile-ttl. Do not use allkeys-lru, as this can evict the global {prefix}counter key. If the counter key is evicted, the ID sequence resets, breaking stream resumability guarantees.
  3. Limit Stream Cardinality at the application level if possible by grouping related connections.

Multi-tenant deployments

If multiple MCP servers share a Redis instance, use different prefixes:

store_a = RedisEventStore(redis_client, key_prefix="server-a:")
store_b = RedisEventStore(redis_client, key_prefix="server-b:")

PostgresEventStore

Stores MCP SSE events in PostgreSQL so servers can resume interrupted streams across restarts and redeploys. It takes an asyncpg connection pool, so concurrent request handlers share connections cleanly — a good fit for deployments that already run Postgres and want durability without adding Redis.

For ephemeral multi-worker fan-out, RedisEventStore is lighter; for a pure single-process server with no external service, use SQLiteEventStore.

How it works

One row per event:

{table}.event_id    — BIGINT GENERATED ALWAYS AS IDENTITY PRIMARY KEY, monotonic IDs (never reused)
{table}.stream_id   — TEXT, the stream the event belongs to
{table}.payload     — TEXT, serialized JSONRPCMessage ("" for priming events)
{table}.created_at  — DOUBLE PRECISION, unix timestamp used for TTL expiry
  • Monotonic IDs via an IDENTITY column — strictly increasing, never reused, same guarantee as Redis INCR
  • Indexed replayWHERE stream_id = $1 AND event_id > $2 over a (stream_id, event_id) index
  • Pooled & concurrent — accepts an asyncpg.Pool, so many handlers can store/replay without contending on one connection
  • TTL support — expired events are skipped on replay and removed by purge_expired()
  • Multi-tenant isolation via configurable table_name
  • Priming event handling — sentinel empty-string payloads are stored but never replayed

Configuration

PostgresEventStore(
    pool,                     # an asyncpg.Pool
    table_name="mcp_events",  # isolate multiple servers in one database
    ttl=3600,                 # seconds; None = never expire (not recommended)
    replay_batch_size=500,    # rows fetched per round-trip on replay; lower for very large payloads
)

TTL note: PostgreSQL has no automatic row expiry. Events past ttl are skipped on replay, but to reclaim space call await store.purge_expired() periodically (e.g. from a background task or pg_cron). It returns the number of rows deleted.

Multi-tenant deployments

If multiple MCP servers share a database, use different table names:

store_a = PostgresEventStore(pool, table_name="server_a")
store_b = PostgresEventStore(pool, table_name="server_b")

Examples

The examples/ directory contains minimal, runnable MCP servers that wire each backend into a real StreamableHTTPSessionManager:

File Backend Run
sqlite_server.py SQLiteEventStore python examples/sqlite_server.py
redis_server.py RedisEventStore python examples/redis_server.py
postgres_server.py PostgresEventStore python examples/postgres_server.py

Each example is a self-contained note-taking MCP server (tools, resources) that you can connect to with any MCP client at http://localhost:8000/mcp.

See examples/README.md for prerequisites, setup, and a client snippet.

Benchmarks

benchmarks/benchmark.py measures store_event latency (sequential), store_event throughput (concurrent), and replay_events_after latency across all three backends. SQLite runs against an on-disk file (its realistic durable mode), and Redis/Postgres run over the network. Run it yourself:

uv run python benchmarks/benchmark.py --events 2000 --concurrency 50

These numbers are indicative, not authoritative. Absolute latency and throughput depend heavily on hardware, disk, network, and server tuning. Run the script in your environment for numbers that matter.

Benchmark Environment Spec

The table below was measured with the following configuration:

  • CPU / Machine: AMD Ryzen AI 7 350 (8 cores, 16 threads), 24GB DDR5 5600, PCIe Gen 5 NVMe SSD storage, running Fedora Linux 44 (Workstation Edition) x86_64
  • Python Version: 3.12.2
  • Redis Version: 7.2.4 (Docker container on localhost)
  • PostgreSQL Version: 16.2 (Docker container on localhost)

Storage Performance

Backend store p50 store throughput
SQLite ~60 µs ~18,000 ev/s
Redis ~435 µs ~3,400 ev/s
Postgres ~750 µs ~6,200 ev/s

Replay Performance (Total Latency)

Backend Replay 100 Replay 1,000 Replay 10,000
SQLite ~0.88 ms ~5.36 ms ~68.17 ms
Redis ~10.50 ms ~45.20 ms ~380.00 ms
Postgres ~1.10 ms ~6.50 ms ~75.40 ms

What the shape of these results reflects (and should hold across environments):

  • SQLite has the lowest latency and the highest throughput — it runs in-process with no network hop, so every store_event skips a round-trip entirely. The catch is that it's single-writer: that throughput doesn't scale across processes, which is why multi-worker deployments still reach for Redis or Postgres despite the lower single-node numbers.
  • Redis and Postgres pay a network round-trip per store, so per-call latency is higher; Postgres's pooled connections let it run more of those round-trips concurrently, giving it higher throughput than Redis here.
  • Replay: SQLite and Postgres fetch a stream's events in one indexed query, while the Redis backend issues a zrangebyscore followed by a single pipelined execution to fetch payloads concurrently — keeping the entire replay latency bounded to exactly two network round-trips.

Architecture & Guarantees

This section outlines the consistency, ordering, and concurrency guarantees of mcp-persist backends.

1. Event Ordering

  • Per-Stream vs Global: All backends guarantee that event IDs are monotonically increasing, representing a sequential log of events. However, because client-side replay request handling relies on range scans queryable by stream ID, ordering guarantees are per-stream.
  • Preserved Order: Outbound events written to a specific stream via store_event are guaranteed to be replayed in the exact order they were written.

2. Concurrency & Write Semantics

  • Concurrent Writes:
    • Redis: store_event increments a global atomic counter via INCR to get the next sequential ID, and then pipelined commands write the event hash and add it to the stream's sorted set. Multiple workers can write concurrently without any locking, and the IDs are guaranteed to be unique and monotonically increasing.
    • SQLite: SQLite is single-writer and serializes all writes. aiosqlite uses an in-process thread pool to queue commands on a single connection. Concurrent writes from multiple processes are not supported and will raise SQLITE_BUSY errors.
    • PostgreSQL: Uses a native BIGINT GENERATED ALWAYS AS IDENTITY column which handles concurrent sequence increments safely across database sessions.
  • Duplicate Event IDs: Duplicate event IDs are structurally impossible. All backends rely on atomic database counters (AUTOINCREMENT for SQLite, IDENTITY for Postgres, and INCR for Redis) which generate strictly unique and non-overlapping sequence numbers.

3. Consistency & Durability

  • SQLite: Configured with WAL (Write-Ahead Logging) journaling. Writes are flushed to disk on commit, ensuring durability across process restarts.
  • Postgres: Fully ACID compliant. Events are durable once the transaction commits.
  • Redis: Relies on Redis persistence configuration (RDB/AOF). If Redis is deployed as a cache (with no persistence) or with lazy AOF flushing, a Redis crash could roll back the database state, potentially repeating or dropping IDs. For strong durability, configure Redis with AOF (appendfsync everysec or always).

Deploying to production

Once a backend is wired in, see the production guide for operating it: scheduling purge_expired() so storage doesn't grow without bound, treating the store as a critical dependency (failure modes), pre-creating schema under restricted database permissions, TLS and credential handling, connection and pool sizing across workers, and a deployment checklist.

Development

git clone https://github.com/Ar-maan05/mcp-persist
cd mcp-persist
uv sync --all-extras --dev
uv run pytest tests/

The Redis tests use fakeredis and the SQLite tests use in-memory aiosqlite, so the default run needs no external servers. The Postgres tests require a real server and are skipped unless MCP_TEST_POSTGRES_URL is set; to run them and the Redis suite against real backends:

MCP_TEST_REDIS_URL=redis://localhost:6379/0 \
MCP_TEST_POSTGRES_URL=postgresql://postgres@localhost:5432/postgres \
uv run pytest tests/

See CONTRIBUTING.md for more.

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mcp_persist-1.2.1.tar.gz (47.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mcp_persist-1.2.1-py3-none-any.whl (22.6 kB view details)

Uploaded Python 3

File details

Details for the file mcp_persist-1.2.1.tar.gz.

File metadata

  • Download URL: mcp_persist-1.2.1.tar.gz
  • Upload date:
  • Size: 47.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.14.4

File hashes

Hashes for mcp_persist-1.2.1.tar.gz
Algorithm Hash digest
SHA256 6ffed5401ac0ea29014c54817358db3db196f79850b65a6dfc414e6cc7f2ba59
MD5 bad381b3060ba2fc4ae54c0f2ab9eaf5
BLAKE2b-256 1cc69e6a3e86cfe5e6978197d9e809a5bc7a8d8bcaf25861fdae7cef8b16f2b1

See more details on using hashes here.

File details

Details for the file mcp_persist-1.2.1-py3-none-any.whl.

File metadata

  • Download URL: mcp_persist-1.2.1-py3-none-any.whl
  • Upload date:
  • Size: 22.6 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.14.4

File hashes

Hashes for mcp_persist-1.2.1-py3-none-any.whl
Algorithm Hash digest
SHA256 6d11d791c33c2a32566d88ebcff7568d35aa16981e861ab98ad0f5472c6b287e
MD5 c146ccc07cdca53f4608e4feddd58f07
BLAKE2b-256 fa0dba02f049327e4e3c9e1463b0af2d7a96456263d230b3b5d4d1ef1b052c03

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page