Back to Browse

Hicortex MCP Server

Developer ToolsUse Caution4.4MCP RegistryLocal
Free

Server data from the Official MCP Registry

Shared fleet memory for AI agents: nightly self-correction, recall every prompt (supported agents).

About

Shared fleet memory for AI agents: nightly self-correction, recall every prompt (supported agents).

Security Report

4.4
Use Caution4.4High Risk

Hicortex is a local-first memory server whose visible plugin code requires a bearer token, defaults to localhost, and uses fail-soft HTTP calls with bounded timeouts, with no hardcoded secrets or exfiltration patterns in the reviewed files. The main concerns are that the auth token is sent to any configured serverUrl (which may be plaintext HTTP), and that recalled memories are injected into agent prompts, creating a prompt-injection surface that the trust-framing fence only partly mitigates. Permissions (filesystem, local daemon install, process spawning for the Claude CLI, and outbound HTTP to a configured LLM or sync server) fit a developer memory tool, and the code was truncated so the rest of the server could not be fully reviewed. Supply chain analysis found 14 known vulnerabilities in dependencies (2 critical, 6 high severity). Package verification found 1 issue.

3 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

What You'll Need

Set these up before or after installing:

Bearer token for a remote Hicortex server (server prints it via `hicortex status`). Optional — a local server needs no token.Required

Environment variable: HICORTEX_AUTH_TOKEN

URL of a remote Hicortex server (e.g. https://your-server:8787). Optional — omit for a local server on this machine.Optional

Environment variable: HICORTEX_SERVER_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-gamaze-labs-hicortex": {
      "env": {
        "HICORTEX_AUTH_TOKEN": "your-hicortex-auth-token-here",
        "HICORTEX_SERVER_URL": "your-hicortex-server-url-here"
      },
      "args": [
        "-y",
        "@gamaze/hicortex"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Hicortex — AI Fleet Memory

Hicortex MCP server – quality and maintenance score on Glama

npm Downloads License: PolyForm NC Node

Shared memory for AI agents — it corrects itself overnight, and what one agent learns, the whole fleet knows. One memory across every agent, every project, every machine — they stop assuming and start knowing.

  • One brain, every harness — Claude Code, Hermes, OpenClaw, Pi, OpenCode, and any MCP-compatible agent share the same memory.
  • Pushed, not pulled — in every supported coding agent, a compact recall index is injected on every prompt, so the decisions, corrections, and context an agent needs are already in front of it. No re-explaining, no copy-paste, nothing to maintain. Zero LLM calls per turn — no API cost or rate-limit hit from recall.
  • Consolidates overnight — each night it reads the day's sessions, distills what matters, and turns it into Learnings, links, and a knowledge graph.
  • Local-first — raw sessions never leave the machine; only distilled memory is stored.

Install

npx @gamaze/hicortex init
Claude Desktop: one "yes" during init.

Auto-detects your environment, configures one LLM (Ollama, the Claude CLI, or an API key), installs a local daemon (launchd on macOS, systemd on Linux), and registers MCP tools with Claude Code.

For multi-machine setups, point thin clients at a shared server — no local DB or LLM on the clients:

npx @gamaze/hicortex init --server https://your-server.example.com

init auto-detects the other harnesses and installs their clients: a Pi extension (~/.pi/agent/extensions/hicortex.ts — pushed recall, identity + lessons, the ten tools; or copy pi-extension/hicortex/index.ts there manually), an OpenCode plugin (~/.config/opencode/plugins/hicortex.ts — the same trio; or copy opencode-plugin/hicortex/index.ts there manually), the Hermes plugin, and the OpenClaw plugin. pi-mcp-adapter remains a generic MCP escape hatch for any harness (verified against the SSE endpoint) — Pi no longer needs it. See the install docs.

How it works

CAPTURE (nightly)        CONSOLIDATE (nightly)             RECALL (every prompt)
sessions → denoise       score · reflect · link            a compact index of
→ POST /distill          decay · dedup · supersede         relevant memories is
                         (one model, all phases)           pushed into the prompt
                                                           → full text lazy-loaded

Memories strengthen when agents use them, fade when they don't, and link to related ones automatically. Retrieval is hybrid BM25 + vector search — zero-LLM at query time.

The first nightly run captures the last 7 days of sessions by default (not your entire history) — run hicortex nightly --recapture-window <days> once to import more.

Features

  • Per-prompt recall push — relevant memory lands in context every turn; the agent fetches full content with hicortex_get only when it needs it.
  • Memory analytics at /dashboard — growth, recall adoption, and a nightly digest of what was learned.
  • Knowledge graph at /viz — memories clustered by domain, connected by relationship edges.
  • Domains & tags — multi-tag classification with a configurable vocabulary; your categories drift with your data.
  • Learnings from reflection — nightly reflection extracts general, reusable Learnings, not just Experience logs.
  • Self-correcting store — every night, stale facts are rewritten in place with dated provenance; near-duplicates resolve into one (verbatim copies kept free, merges recoverable); superseded decisions are demoted, never re-surfaced. No zombie memory.
  • Unprompted by design — coding agents get recall injected via hooks; instruction-capable clients (Claude Desktop, Cursor-class) get standing instructions, so memory is used without being asked. Plain MCP clients keep full search.
  • Self-calibrating — recall, decay and merge boundaries report their own statistics; tuning is measured, never guessed.
  • Standing context layer — hand-edited "who you are / how to work" Markdown, injected every session, never decayed.

MCP

Nine MCP tools — hicortex_search, hicortex_get, hicortex_recent, hicortex_ingest, hicortex_lessons, hicortex_index, hicortex_graph, hicortex_update, hicortex_delete — plus a /learn skill to save explicit learnings. Full reference →

Stack

TypeScript · Node.js 20+ · SQLite + sqlite-vec + FTS5 (semantic + full-text in one DB) · ONNX embeddings (bge-small-en, CPU) · MCP over HTTP/SSE · one configurable LLM (Ollama, Claude CLI, or any OpenAI-compatible endpoint).

Development

git clone https://github.com/gamaze-labs/hicortex.git
cd hicortex

AGENTS.md at the repository root defines the machine-checkable verification contract. "Done" means the full command chain exits with code 0. The contract mirrors what CI runs. Contributors — human or agent — run it before claiming work complete.

Contributions welcome — see CONTRIBUTING.md.

Links

License

Personal and noncommercial use is free under the PolyForm Noncommercial License 1.0.0. Commercial use requires a per-seat license — see hicortex.gamaze.com.

Reviews

No reviews yet

Be the first to review this server!