Back to Browse

StateCore MCP Server

by Yul761
Developer ToolsLow Risk9.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Auditable memory for coding agents: evidence chains, supersession history, keyless embedded SQLite

About

Auditable memory for coding agents: evidence chains, supersession history, keyless embedded SQLite

Security Report

9.0
Low Risk9.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). 2 known CVEs in dependencies ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

13 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

database

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Override the memory scope name (defaults to the git repository root, else the working directory)Optional

Environment variable: STATECORE_SCOPE

Set to 'true' together with MODEL_* variables to enable background distillation of conversational events; everything else works without itOptional

Environment variable: FEATURE_LLM

OpenAI-compatible API key for background distillation (DeepSeek, OpenAI, Ollama, ...); not required for core memory, audit, and recallRequired

Environment variable: MODEL_API_KEY

OpenAI-compatible base URL for the distillation model (e.g. https://api.deepseek.com/v1)Optional

Environment variable: MODEL_BASE_URL

Model used for background distillation (e.g. deepseek-chat)Optional

Environment variable: MODEL_NAME

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-yul761-statecore-mcp": {
      "env": {
        "MODEL_NAME": "your-model-name-here",
        "FEATURE_LLM": "your-feature-llm-here",
        "MODEL_API_KEY": "your-model-api-key-here",
        "MODEL_BASE_URL": "your-model-base-url-here",
        "STATECORE_SCOPE": "your-statecore-scope-here"
      },
      "args": [
        "-y",
        "statecore-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

StateCore

CI Integration Smoke License: MIT

StateCore is a self-hosted, low-drift long-term memory runtime for AI systems using local or BYO models. It turns memory from accumulated text into controlled state: events are ingested, run through a digest control pipeline, merged into protected stable state, and retrieved with grounded evidence — all over a stable HTTP API you can deploy yourself.

Features

  • Event store — ingest stream events and keyed documents into per-scope memory
  • Digest pipeline — background worker consolidates events into stable state through selection, merge, consistency checks, and retry
  • Protected state — goals, constraints, decisions, and todos are gated by a consistency gate; the LLM proposes, the pipeline enforces
  • Auditable facts — every fact carries its evidence and its supersession chain, and a fact that leaves the active set is retired rather than deleted, so "why do you believe this, and what did you believe before" stays answerable
  • Recorded discards — the digest logs what it dropped and why, against a fixed set of reasons; losing information is survivable, losing it silently is not
  • Replaceable ontology — facets come from a pack resolved per tenant and scope, so the engine stores, protects and supersedes without knowing what a facet means
  • Retrieval — hybrid keyword + optional pgvector semantic search over events and digests, packed into a caller-declared character budget that reports what it refused
  • Reminders — daily reminder job surfaces follow-up items from active scopes
  • Benchmarks — built-in synthetic memory quality suite (fact retention, goal stability, decision continuity, retrieval MRR), plus a published LongMemEval comparison
  • MCP serverstatecore-mcp, a zero-deploy Model Context Protocol front end for coding agents; keyless by default, one SQLite file, no infrastructure

Quickstart

1. Install dependencies

pnpm install

2. Configure environment

cp .env.example .env

Minimum required variables:

PORT=3002
LOCAL_USER_TOKEN=local-dev-user
DATABASE_URL=postgresql://postgres:postgres@localhost:5434/statecore
REDIS_URL=redis://localhost:6380

To enable LLM features (digest, answers):

FEATURE_LLM=true
MODEL_PROVIDER=openai-compatible
MODEL_API_KEY=<your-key>
MODEL_BASE_URL=https://api.openai.com/v1
MODEL_NAME=gpt-5-mini

On OpenAI, pick a model that accepts reasoning_effort. The runtime turn sends it on every request — assistant-runtime.ts defaults it to low rather than leaving it unset — so POST /v1/memory/runtime/turn fails against a gpt-4o* model, which rejects the parameter. Digest and answers do not send it unless MODEL_STRUCTURED_OUTPUT_REASONING_EFFORT is set, so a gpt-4o* model appears to work right up until the first runtime turn. Any endpoint that accepts the parameter, or ignores unknown ones, is fine.

3. Start infrastructure

docker compose -f docker-compose.local.yml up -d

This starts Postgres (with pgvector) and Redis.

4. Prepare the database

pnpm db:generate
pnpm db:migrate
pnpm seed

5. Start the services

pnpm dev:api      # NestJS API on PORT (default 3002)
pnpm dev:worker   # background digest + reminder workers

The API is available at http://localhost:3002 (or whatever PORT is set to).

API

Authentication

All requests require an x-user-id header. For local development, set LOCAL_USER_TOKEN=local-dev-user in .env and send:

x-user-id: local-dev-user

Public surface (/v1)

The /v1 prefix exposes the stable, public-facing subset of the API. Full OpenAPI schema:

GET /openapi.json

Interactive Scalar UI:

http://localhost:3002/docs

Reference documentation: docs/api.md

Key endpoints

MethodPathDescription
POST/v1/memory/eventsIngest a stream event or document
POST/v1/memory/retrieveRetrieve grounded evidence for a query, within an optional maxChars budget
POST/v1/memory/digestTrigger a State Layer digest job
GET/v1/memory/factsGrouped memory facts for a scope
GET/v1/memory/facts/:factId/provenanceA fact's evidence and its full version chain
GET/v1/memory/digests/:digestId/selectionWhat a digest kept, and what it discarded and why
GET/v1/facet-packThe active facet ontology for a scope or account
GET/v1/scopesList scopes
GET/memory/stable-stateCurrent stable-state snapshot ¹
GET/memory/working-stateCurrent working-memory snapshot ¹
GET/memory/layer-statusAggregated layer health ¹

The three audit readers in the middle are the ones that make the engine's memory checkable rather than merely stored; docs/api.md lists the full frozen surface.

API stability: the /v1 contract is frozen and additive-only — see STABILITY.md. It currently covers 21 operations across 19 paths. The contract carries its own version in the generated OpenAPI document (info.version, currently 1.5.0), which is what tells you how current a spec you are holding; it is not the release tag and not any package version.

¹ Internal read-model endpoints — registered only at /memory/..., not under /v1, and not part of the frozen /v1 contract.

Use it from your coding agent (MCP)

statecore-mcp is a separately published npm package that fronts this engine over the Model Context Protocol — no running server required. It runs the engine embedded (one process, one SQLite file), keylessly by default:

npx -y statecore-mcp --data ~/.statecore

Point any MCP client at it (dsh, Claude Code, Cursor configs included), or run it against a full StateCore deployment via --url for shared/multi-agent memory. Full docs, host configs, and the keyless/keyed capability matrix: apps/mcp/README.md.

Architecture

apps/api        NestJS HTTP server — ingestion, retrieval, runtime turns, diagnostics
apps/worker     BullMQ background workers — digest, working-memory updates, reminders
apps/mcp        statecore-mcp — MCP server, embedded or thin client against apps/api

packages/core       Memory engine (MemoryService, DigestService, RetrieveService, AssistantSession)
packages/contracts  Zod schemas for all API I/O
packages/db         Prisma schema, migrations, and client
packages/prompts    LLM prompt templates (digest, answer, runtime)

StateCore sits between your client and your model endpoint. Events flow in, the digest pipeline consolidates them into protected state, and retrieval pulls grounded evidence back out for answers or runtime turns.

Three-layer memory model:

  • Fast Layer — synchronous; assembles prompt context for the current turn from recent events, working memory, and stable state
  • Working Memory — lightweight, quickly-updated structured memory; bridges raw recent turns and slow stable-state consolidation
  • State Layer — authoritative, replayable, low-drift long-term memory; updated asynchronously through the digest control pipeline

See docs/vision-and-roadmap.md for the layered model design and roadmap.

Testing and Benchmarks

Run package tests:

pnpm --filter @statecore/core test
pnpm --filter @statecore/api test

Run the full latency + memory quality benchmark:

pnpm benchmark

Run the synthetic memory quality evaluation (no LLM required):

pnpm --filter @statecore/core eval

Benchmark methodology: docs/benchmarking.md

LongMemEval

Compared against mem0 OSS on LongMemEval at an equal context budget — the same number of characters of memory in the answerer's prompt, rather than the same number of retrieved items. 194 questions, gpt-5 answering, the official gpt-4o judge (2026-08-08):

system4,000 tok16,000 tok64,000 tok
StateCore51.0% ±7.080.9% ±5.587.6% ±4.6
mem0 OSS61.3% ±6.959.8% ±6.961.3% ±6.9
No memory (recency window)9.3% ±4.122.7% ±5.953.6% ±7.0

At 64k, StateCore also beats the 70.1% ±6.4 ceiling of pasting the entire corpus into the prompt with no memory layer at all. At 4k it loses to mem0 by 10 points — a real difference in kind, explained rather than closed, in the full write-up.

Numbers, caveats and what the benchmark does not measure: docs/longmemeval.md. Harness, raw retrievals and per-question judge verdicts: memory-budget-bench.

Documentation

  • docs/start-here.md — orientation for new contributors
  • docs/repo-map.md — repo structure, where code belongs, and the full doc index
  • docs/philosophy.md — what the engine is for, and why auditability is the centre
  • docs/glossary.md — facet, pack, supersession, retirement, drop log
  • docs/api.md — full API reference and the /v1 contract rules
  • docs/vision-and-roadmap.md — positioning and roadmap, with a status map
  • docs/technical-overview.md — architecture internals
  • docs/digest-state.md — digest state specification
  • docs/protected-state-merge.md — the deterministic merge, field by field
  • docs/drift-definition.md — drift definition and metrics
  • docs/assistant-runtime.md — assistant runtime specification
  • docs/benchmarking.md — benchmark methodology
  • docs/longmemeval.md — LongMemEval results vs mem0 OSS
  • docs/evaluation-metrics.md — evaluation metrics specification

Contributing

  1. Fork the repo and create a feature branch.
  2. Run pnpm lint and pnpm --filter @statecore/core test before opening a PR.
  3. Follow Conventional Commits.

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!