Skip to main content

memboot

CI CodeQL Python 3.11+ License: MIT

Persistent memory for LLMs that works offline. No API keys. No servers. No cloud.

Every other memory tool requires an LLM call to store and retrieve, a managed API, or an HTTP server running in the background. memboot requires none of that. It's SQLite + TF-IDF on your local disk — works on an airplane, works in CI, works without giving a third party access to your codebase.

$ memboot init .
  Indexed 142 files, 1,847 chunks

$ memboot query "authentication flow"
  src/auth/jwt.py:create_token     0.89  "Creates signed JWT with user claims..."
  src/auth/middleware.py:verify     0.84  "Extracts and validates bearer token..."
  src/models/user.py:User          0.71  "User model with hashed password..."

$ memboot remember "Use JWT for API auth, sessions for web" --type decision
  Stored decision #14

$ memboot context "auth" --max-tokens 4000
  # Context: auth (3,842 tokens)
  ## src/auth/jwt.py
  ...

Features

  • Smart chunking — AST-aware Python extraction, Markdown heading splits, YAML/JSON key-level, sliding window fallback
  • Fully offline — Built-in TF-IDF embeddings with zero external dependencies. Optional sentence-transformers for semantic search
  • Episodic memory — Store decisions, patterns, observations alongside your code index
  • Context builder — Token-budgeted markdown blocks with optional local-Ollama reranking and smart context packs
  • MCP server — Expose memory as tools for Claude Code, Cursor, Claude Desktop, Windsurf, Zed, OpenAI Codex CLI, mcphost, ollmcp, and LibreChat. memboot install --all-detected wires it into every client you have, zero config (integration details). The same memory store is shared across all clients — point Codex, Qwen-via-mcphost, and Claude at the same project and they all read/write the same context
  • Zero-config install — One command writes the MCP entry into each client's config with automatic backup
  • File ingestion — Ingest external files, PDFs, and web pages into project memory

Install

pip install memboot

Optional extras:

pip install memboot[embed]  # sentence-transformers for semantic embeddings
pip install memboot[mcp]    # MCP server support
pip install memboot[pdf]    # PDF ingestion
pip install memboot[watch]  # File watching for auto-reindex
pip install memboot[web]    # Web page ingestion
pip install memboot[secure] # SQLCipher DB encryption + encrypted notes sync

Quick Start

# Index a project
memboot init /path/to/your/project

# Search for relevant code and memories
memboot query "authentication flow" --project /path/to/your/project

# Store a decision
memboot remember "Use JWT for API auth, sessions for web" --type decision --project /path/to/your/project

# Store locally and mirror to a git-backed notes repo
memboot remember "Decided to use Redis for cache keys" \
  --type decision \
  --project /path/to/your/project \
  --notes-repo https://github.com/your-org/notes.git

# Pull notes from your git repo into local memboot memory
memboot notes-sync --project /path/to/your/project --repo https://github.com/your-org/notes.git

# Get formatted context for an LLM prompt
memboot context "database schema" --project /path/to/your/project --max-tokens 4000

# Smart context pack (local Ollama rerank + structured output)
memboot context "database schema" --project /path/to/your/project --smart-pack --local-only

# Check license status
memboot status

# Rotate DB encryption key
memboot rekey --project /path/to/your/project --new-db-key "new passphrase"

CLI Commands

Command Description
memboot init Scan, chunk, embed, and index a project
memboot query Search project memory by similarity
memboot remember Store an episodic memory (decision, note, observation, pattern)
memboot context Export context with token budget; supports --smart, --smart-pack, and --local-only
memboot status Show license tier and available features
memboot rekey Rotate SQLCipher key for a project DB
memboot reset Clear all indexed data and memories
memboot ingest Add external files (free); PDFs and URLs require Pro
memboot watch Watch project and auto-reindex on changes (Pro)
memboot notes-sync Sync markdown notes from a git repo into local memboot memory
memboot serve Start MCP stdio server
memboot install Register memboot as an MCP server in Claude Code / Cursor / Claude Desktop / Windsurf / Zed / OpenAI Codex CLI / mcphost / ollmcp / LibreChat
memboot uninstall Remove memboot from a client's MCP config
memboot installed List which MCP clients currently have memboot registered

Free vs Pro

memboot's core is free forever. Pro is a one-time $59 license — perpetual, no subscription, no account. The key validates entirely offline (HMAC checksum, no phone-home), consistent with the rest of the tool: you own it.

Free Pro — $59 one-time
Index, query, remember, context ✓ ✓
Episodic memory + bitemporal model ✓ ✓
File ingestion ✓ ✓
Encrypted storage ✓ ✓
MCP server + install across 9 clients ✓ ✓
PDF & web ingestion — ✓
watch auto-reindex daemon — ✓

Activate Pro: export MEMBOOT_LICENSE=MMBT-XXXX-XXXX-XXXX

How It Works

Project Files ──→ Chunker ──→ Embedder ──→ SQLite Store
                   (AST)      (TF-IDF)     (~/.memboot/)
                                                │
Query Text ─────→ Embedder ──→ Cosine Sim ──→ Results
                                                │
Memories ───────→ Embedder ──→ Store ───────→ Searchable
  1. Index — Recursively discover files, chunk by language (Python AST, Markdown headers, etc.), embed with TF-IDF, store in SQLite
  2. Query — Embed your query, compute cosine similarity against all chunks and memories, return top-K
  3. Remember — Store episodic memories (decisions, patterns, observations) with embeddings for later retrieval
  4. Context — Build token-budgeted markdown blocks with source attribution for LLM consumption

Each project gets its own SQLite database at ~/.memboot/{hash}.db. No servers, no API keys, no network calls.

Security Hardening

  • Set MEMBOOT_DB_KEY to enable SQLCipher encryption at rest for the local project DB.
  • Set MEMBOOT_NOTES_KEY to encrypt mirrored notes content before committing to notes repos.
  • Set MEMBOOT_DB_KEY_NEW and run memboot rekey to rotate DB keys.

How It's Different

Works offline No API keys No background server CLI-native
memboot Yes Yes Yes Yes
Mem0 No (requires LLM) No No No
Memori No (managed API) No N/A No
OpenMemory No (HTTP server) No No Partial

Architecture

src/memboot/
├── models.py        # Pydantic v2 data models
├── store.py         # SQLite WAL backend (numpy BLOB serialization)
├── chunker.py       # Language-aware chunking (Python/MD/YAML/JSON/window)
├── embedder.py      # TF-IDF (built-in) + sentence-transformers (optional)
├── indexer.py       # Discovery → chunk → embed → store pipeline
├── query.py         # Cosine similarity search
├── memory.py        # Episodic memory CRUD
├── context.py       # Token-budgeted context builder
├── licensing.py     # Free/Pro tier management
├── cli.py           # Typer CLI commands
├── mcp_server.py    # MCP stdio server (3 tools)
├── notes_repo.py    # Git-backed notes sync/mirror support
└── ingest/          # External file/PDF/web ingestion

Community

Discord — Join the community

License

MIT

Metadata

Release files for memboot 0.8.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for memboot 0.8.1
File Size Uploaded Provenance Actions
memboot-0.8.1.tar.gz 170.1 kB With provenance Details for memboot-0.8.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for memboot 0.8.1
File Interpreter ABI Platform Actions
memboot-0.8.1-py3-none-any.whl Python 3 none any Details for memboot-0.8.1-py3-none-any.whl

Total release size: 247.4 kB

Release files / memboot-0.8.1.tar.gz

Download URL memboot-0.8.1.tar.gz
Size 170.1 kB
Tags Source
SHA-256 checksum
How to use checksums
9b00fc261a7ba4352c0281ea1e20ecdcca8c1ee01433588d090eee15e8463724
BLAKE2b-256 checksum
How to use checksums
614785bc214caa16389dc74f74a392397ddc8f57c65cd609afb5ad43e6e02579
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 17, 2026.

Transparency log

Release files / memboot-0.8.1-py3-none-any.whl

Download URL memboot-0.8.1-py3-none-any.whl
Size 77.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
b8efa179eb940fb34a784a28c3789376b6fe1f3842b4471ffa9e4b27e6abd6fc
BLAKE2b-256 checksum
How to use checksums
65db3ca6ee740395070f5fca93cd85ccd83dea9d627f444e0d143ac358b2d88e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 17, 2026.

Transparency log

Security for memboot 0.8.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for memboot-0.8.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jul 17, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page