Back to Browse

Bilinc MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Hosted agent memory with provenance, contradiction surfacing, and snapshot rollback.

About

Hosted agent memory with provenance, contradiction surfacing, and snapshot rollback.

Security Report

4.2
Use Caution4.2High Risk

Bilinc is a cloud-based memory SDK for AI agents with a well-structured codebase and appropriate authentication via API keys. The public PyPI package is cloud-only and properly delegates sensitive operations to hosted endpoints. However, there are several moderate-severity code quality and security concerns: insufficient input validation in key security paths, patterns of unvalidated regex use, overly broad exception handling, and potential information disclosure through error logging. The permissions profile (network_http, env_vars) aligns with the service's cloud-first architecture, but local runtime internals present in the repository introduce additional complexity. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

3 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

Bilinc Cloud API key (bil_live_...). Create one in the Bilinc Cloud dashboard at https://bilinc.space.Required

Environment variable: BILINC_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-atakanelik34-bilinc": {
      "env": {
        "BILINC_API_KEY": "your-bilinc-api-key-here"
      },
      "args": [
        "bilinc"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Bilinc

PyPI Python License MCP Release CI

Hosted memory infrastructure for coding agents: commit, recall, and inspect agent state through one API key, with verification, provenance, and recovery around every write.

Retrieval answers "what is similar to this?". Long-running agents also need to answer "who wrote this state, was it verified, did it contradict what we already knew, and can we undo it?" — that is the layer Bilinc provides.

Bilinc 2.1.9 on PyPI is the public cloud-only package: a thin Python SDK, CLI, and MCP adapter for Bilinc Cloud. It does not ship the local StatePlane, storage backends, eval, observability, integrations, or server runtime internals.

Frozen regression receipt — LongMemEval-s cleaned retrieval fixture, 500 questions: Hit@5 98.0%, NDCG@5 0.913, no LLM reranker, no paid API. This is an isolated retrieval guardrail, not a current hosted SLA, end-to-end agent score, or competitor ranking — see Benchmark receipt for the full scope and qualification.

The short version

Bilinc is the state layer between an agent and the things it must remember. It keeps memory writes attributable, correctable, and recoverable instead of treating retrieval as a bag of similar text.

If your agent needs to...Bilinc gives it...
Recall a decision before actingKey-scoped recall with explicit profiles and evidence metadata
Correct a bad memoryrevise, contradiction-aware state, and provenance-preserving updates
Recover from an unsafe runSnapshots, diffs, and confirmed rollback
Work across coding toolsA Python SDK, CLI, and stdio MCP adapter

The fastest path is pip install -U bilinc, bilinc login, then bilinc quicktest against Bilinc Cloud.

Use Bilinc when

  • A long-running coding agent needs to recall prior decisions before a risky edit.
  • You need to know which run, tool, or operator produced a piece of agent state.
  • A bad agent run wrote incorrect state and you need a recovery path, not a manual cleanup.
  • Several agents or teammates share one memory surface and you need key-scoped access and usage visibility.

Do not use Bilinc when

  • You only need semantic search over documents — a vector database is the simpler primitive.
  • You require an Apache-2.0 licensed, fully self-hosted runtime. The public package is cloud-only and licensed BUSL-1.1.
  • You want the memory layer to also be your agent framework. Bilinc is the state layer your runtime calls; it does not orchestrate agents.

Choose your surface

You want...Use...
A hosted memory API for an agent or MCP clientThe public cloud-only package from PyPI
Local StatePlane, SQLite/PostgreSQL, benchmarks, or internalsThis repository and the architecture guide
A hosted MCP connectionThe MCP setup guide

The public package is intentionally smaller than this repository. It does not bundle the internal StatePlane or local storage runtime.

Start in 60 Seconds

pip install -U bilinc
bilinc start

bilinc start is the first-run guide. The activation target is simple: reach a passing bilinc quicktest, which performs one hosted commit, one hosted recall, and one Cloud status check.

  1. Start the 7-day Bilinc Cloud trial at https://bilinc.space/signup.
  2. Confirm email.
  3. Create one hosted API key in the Cloud dashboard.
  4. Connect the CLI:
bilinc login --api-key bil_live_...
bilinc quicktest

To reproduce this release exactly:

pip install -U bilinc==2.1.9

If you prefer a browser guide, open https://bilinc.space/install and follow the same four-step path.

MCP Adapter

Bilinc exposes a standard Model Context Protocol server over stdio, so any MCP-compatible client can connect — Claude Code, Codex, Cursor, Hermes-Agent, opencode, and others.

{
  "mcpServers": {
    "bilinc": {
      "command": "python",
      "args": ["-m", "bilinc.cloud_mcp"],
      "env": { "BILINC_API_KEY": "bil_live_..." }
    }
  }
}

Eight tools — the core memory lifecycle, and nothing else:

ToolWhat it does
commit_memWrite durable agent state. Each write carries provenance — which run, tool, or operator produced it — and returns a version for optimistic concurrency.
recallRetrieve prior context and decisions before acting. profile selects retrieval quality; smart retrieval is that argument, not a separate tool.
reviseDeliberately correct something already known. It never creates, so a correction stays distinguishable from an accidental overwrite.
forgetDestructive. Remove obsolete state from active recall. A reason is required and is audited; the deleted value is never returned.
statusReport the authenticated workspace, plan, capabilities, recall profiles, limits, and usage. Never billed.
snapshotCheckpoint a project before risky work, or list existing checkpoints.
diffCompare a checkpoint against another checkpoint or current state. Values are redacted by default.
rollbackDestructive in execute mode. Restore a checkpoint through a free preview plus an explicitly confirmed execute.

Operator and debug tooling — health probes, benchmarks, export/import, workspace replay — stays local-only, as do the epistemic read tools for claims, contradictions, and graph queries. The hosted adapter does not bundle local runtime internals.

Documented client setups: Claude Code · Codex · Cursor · any MCP client

Python SDK

from bilinc import CloudClient

client = CloudClient()  # reads BILINC_API_KEY or a key saved by `bilinc login`

# Write, and keep the version for optimistic concurrency.
written = client.commit("agent.goal", {"ship": "reliable memory"}, memory_type="semantic")
results = client.recall("agent goal", limit=5)

# Correct something you already know. Fails if it does not exist.
client.revise("agent.goal", {"ship": "verifiable memory"},
              reason="scope corrected", expected_version=written["entryVersion"])

# Checkpoint before risky work, then see what changed.
snapshot = client.create_snapshot(label="before-autonomous-run")["snapshot"]
client.diff(snapshot["id"])

# Drop obsolete state. A reason is required and is audited.
client.forget("agent.goal", reason="superseded by the planner service")

# Recover. Preview is free; execute is destructive and needs the token.
preview = client.rollback_preview(snapshot["id"], reason="undo bad agent run")
client.rollback(snapshot["id"], confirmation_token=preview["confirmationToken"],
                reason="undo bad agent run")

client.status()   # what can this key do?
client.health()   # is the service reachable?

For server, CI, and hosted agent runtimes, store the key as BILINC_API_KEY.

CLI

bilinc status                 # authenticated plan, capabilities, limits, usage
bilinc health                 # public service health
bilinc commit --key agent.goal --value '{"ship":"reliable memory"}'
bilinc recall --query "agent goal"
bilinc revise --key agent.goal --value '{"ship":"verifiable memory"}' --reason "scope corrected"
bilinc snapshot create --label before-autonomous-run
bilinc snapshot list
bilinc diff --from-snapshot snap_...
bilinc forget --key agent.goal --reason "superseded by the planner service"
bilinc doctor

Rollback is two stages. Execute takes the token from the preview and never prompts interactively, so it stays safe inside automation:

bilinc rollback preview --snapshot snap_... --reason "undo bad agent run"
bilinc rollback execute --snapshot snap_... --reason "undo bad agent run" \
  --confirmation-token <token-from-preview>

Useful first-run commands:

bilinc start
bilinc login --api-key bil_live_...
bilinc quicktest
bilinc mcp install

Hosted Endpoints

EndpointNotes
GET /api/cloud/healthPublic service health. No key, no billing.
GET /api/cloud/statusAuthenticated capabilities for one key. Never billed.
POST /api/cloud/memory/commitWrite.
POST /api/cloud/memory/recallRead.
POST /api/cloud/memory/reviseReplace an existing memory.
POST /api/cloud/memory/forgetDestructive. Reason required.
GET /api/cloud/memory/snapshotsList checkpoints. Free.
POST /api/cloud/memory/snapshotsCreate a checkpoint.
POST /api/cloud/memory/diffCompare checkpoints. Free.
POST /api/cloud/memory/rollback/previewFree. Mints a confirmation token.
POST /api/cloud/memory/rollbackDestructive. Requires that token.

All hosted endpoints share https://bilinc.space. Authenticated memory operations require an active Bilinc Cloud entitlement.

Send an Idempotency-Key header on any write you might retry: the same key with the same payload replays the original result and is billed once, and the same key with a different payload is refused with 409 idempotency_conflict.

Benchmark receipt

Frozen regression receipt, LongMemEval-s cleaned retrieval fixture, 500 questions: Hit@5 98.0%, NDCG@5 0.913, with no LLM reranker and no paid API.

This is a frozen isolated retrieval guardrail — not a current hosted SLA, not an end-to-end agent score, and not a competitor ranking. Published memory-system scores use different metrics, datasets, and levels of LLM assistance, so they are not directly comparable. Present this receipt only with this isolated scope attached.

Evidence map

The repository keeps dated manifests with source state, dataset provenance, runner and metric semantics. These are traceability artifacts, not claims that Bilinc is universally first place.

LanePublicly stored evidenceScope
LongMemEval-sfrozen manifestIsolated retrieval guardrail
AMB legacy v3current Modal manifestsHistorical generic harness; not Vectorize AMB RAG/judge
Official LoCoMoretrieval manifestsRetrieval component; not end-to-end QA/F1
Evidence contractvalidation rulesHashes, limitations, and reproducibility boundaries

For the engineering rationale, read Why vector search is not enough for agent memory.

Compare

Answer guides

Contributing

Start with CONTRIBUTING.md. Use Discussions for design questions and roadmap feedback; use an issue for a reproducible bug or a scoped implementation task.

Security reports should follow SECURITY.md. Please do not include private memory values, API keys, or production logs in issues, pull requests, benchmark fixtures, or screenshots.

Links

License

BUSL-1.1. See LICENSE.

Reviews

No reviews yet

Be the first to review this server!

Bilinc MCP Server - Hosted agent memory with provenance, contradiction | MCP Marketplace