Skip to main content

memory-hive-mcp

Local-first memory your AI agents share over MCP. Agents propose; only you confirm.

memory-hive-mcp is a thin Model Context Protocol server. It lets any MCP-capable host (Claude Desktop, Cursor, and friends) read and write your memory — stored on your computer, by your Hive, never uploaded anywhere.

This package contains no memory engine. It relays MCP protocol traffic to the Hive app already running on your machine (127.0.0.1:8768). Your data never passes through this bridge as stored state, and nothing leaves your computer.

The problem it solves

Every major assistant now has cross-session memory, so "my AI has no memory" is no longer the problem. The problem is what replaced it: memory is siloed per vendor, in formats you cannot export, governed by policies you did not set.

Without Hive With Hive
Where memory lives Each vendor's servers A file on your machine
Switching clients Start over from zero Same memory, any MCP client
Who can write The model, silently The model can only propose; you confirm
Export A "delete everything" button It is already on your disk
Using 3 assistants 3 partial memories, none yours 1 memory, 3 readers

Who this is for: people who use two or more AI assistants seriously enough to be annoyed by re-introducing themselves. With one assistant, your vendor's built-in memory is probably enough.

Install

pip install memory-hive-mcp

Requires Python 3.8+. No third-party dependencies. This installs the command memory-hive-mcp.

(Note: an unrelated project owns the plain hive-mcp name on PyPI — that is not us.)

Prerequisite: a running Hive

memory-hive-mcp talks to the Hive on your own machine. Get it from the Mac App Store:

https://apps.apple.com/app/id6806992983

Then register an agent inside the Hive (POST /api/agent/register) to obtain an agent_id and access_token.

This package will not work on its own. It contains no memory engine, no database and no index — it only relays MCP traffic. If the Hive app is not installed and running, you get a connection to a bridge that has nothing behind it. That limitation is stated here on purpose rather than buried, so nobody installs this expecting a standalone memory server.

What happens without a running Hive

MCP method Without a running Hive
initialize Answered locally — the handshake completes.
tools/list Answered locally — all six tools are listed.
tools/call Fails with an explicit error naming HIVE_MCP_URL and the App Store link. No result is invented.

So a directory crawler, a CI check, or a curious pip install can still see the tool surface on a machine with no Hive — while any real memory operation fails honestly instead of pretending to succeed. A fabricated empty result would be worse than an error: the caller would conclude the user's memory is empty.

Configure your MCP host

Add the server to your host's MCP config. For Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "hive-memory": {
      "command": "memory-hive-mcp",
      "env": {
        "HIVE_AGENT_ID": "your-agent-id",
        "HIVE_AGENT_TOKEN": "your-access-token"
      }
    }
  }
}

Environment variables

Name Required Description
HIVE_AGENT_ID yes Agent id issued by your own Hive.
HIVE_AGENT_TOKEN yes Access token issued when the agent was registered. Keep it secret.
HIVE_MCP_URL no Hive MCP endpoint. Defaults to http://127.0.0.1:8768/mcp.

The six tools

Tool Direction What it does
recall read Semantic search over your memory. {"query": "...", "limit": 10, "compact": true} — optional vaults narrows the search, query_vector switches to embedding recall.
propose write → pending Submits a memory for your approval. {"content": "..."} plus optional title, vault, tags, vector, and client_id as an idempotency key. Returns a conflict_warning when a near-duplicate exists.
manage admin Routed by action: list_pending / forget (soft delete) / restore / get_by_id / discard_pending.
get_context session start Pulls recent memory from your active threads and open tasks to seed a conversation. {"limit": 8}.
say collaboration Posts to the shared board. {"summary": "..."} plus optional to, kind, stage, task_id, refs, ttl.
board collaboration Reads the shared board with a cursor. {"limit": 20, "since": "<cursor>"} — roster: true also returns who is on duty.

A typical session: get_context on open → recall mid-conversation → when you say "keep this", it proposes → you confirm in your Hive on the Mac.

A shared ledger, not just a shared store

say and board make the Hive something more than a memory table: a place where several agents and one human keep the same ledger.

An agent posts what it just finished (say); another picks it up on its own schedule (board with a cursor) — no push, no waking anyone up, no orchestrator in the middle. Identity comes from the credential, not from a field the caller can set, so one agent cannot speak as another, and the human sees every hand-off in the same thread.

Your agent can propose. It cannot decide.

This is the design point that separates this server from a memory cache.

An agent can propose a memory, but it cannot confirm one. What it writes lands in a pending queue and stays there until you accept it inside your own Hive. There is no self-confirm, no silent background write, no path by which a model quietly decides what is true about you.

Memory is partitioned into vaults, and the boundary is enforced by the Hive — checked server-side, not promised by a prompt:

Agent type Public vaults Private vaults
Cloud agent (mcp / mobile) ✅ open 🔒 sealed
Local agent (non-cloud) ✅ open ✅ open

Agents missing from the registration table are sealed by default. A private vault entry is not readable, deletable, or restorable by an agent that is not allowed to see it.

Why a bridge, not a bundle

Your memory should have exactly one writer: the Hive on your machine. This server therefore speaks protocol and nothing else — no data files are opened, no state is cached, no engine is duplicated. That keeps your memory single-sourced, local, and under your control.

Status

Alpha (0.x). The wire protocol is stable; configuration and tool signatures may still change. See CHANGELOG.md for what changed between versions.

Platforms. The Hive app (the memory engine this bridge talks to) currently ships for macOS — App Store. Windows and Linux builds are in progress; the bridge itself is pure Python and runs anywhere, but it needs a Hive to talk to.

No benchmarks. We deliberately do not publish retrieval benchmarks. On a retrieval leaderboard we would lose to purpose-built vector stores, and we are not making that claim. What we do claim is narrower and checkable: the data stays on your machine, and the write authority stays with you.

License

MIT

Metadata

Release files for memory-hive-mcp 0.1.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for memory-hive-mcp 0.1.3
File Size Uploaded Provenance
memory_hive_mcp-0.1.3.tar.gz 17.4 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for memory-hive-mcp 0.1.3
File Interpreter ABI Platform
memory_hive_mcp-0.1.3-py3-none-any.whl Python 3 none any Details

Total release size: 29.6 kB

Release files / memory_hive_mcp-0.1.3.tar.gz

Download URL memory_hive_mcp-0.1.3.tar.gz
Size 17.4 kB
Tags Source
SHA-256 checksum
How to use checksums
3ba250e84179f9c352e8d3b590d357f80a176e6b6e6c5ee580070ef3a84a07f4
BLAKE2b-256 checksum
How to use checksums
826dc10cc5e168f90aaf481d1bad22fb886609a871e0655d345b0692e7e92f70
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.

Transparency log

Release files / memory_hive_mcp-0.1.3-py3-none-any.whl

Download URL memory_hive_mcp-0.1.3-py3-none-any.whl
Size 12.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
0a849f3759ea3db8417a8071f6cdf34313cfa6af617e7857b3da8bbcff9e6e90
BLAKE2b-256 checksum
How to use checksums
8ac62d8e75b9777847fea25a6fc297815fb8350c4180b06e62af95703af00032
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.

Transparency log

Security for memory-hive-mcp 0.1.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for memory_hive_mcp-0.1.3.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page