Add the MemScope MCP server

remember (content, scope?, team?, project?, importance?, idempotency_key?, kind?, valid_until?, supersedes?, agent?, run_id?)

Store an explicit memory. importance is 0-1 (default 0.5); scope is organization (alias shared), personal (alias private), team or project; team/project take an id, slug, name or alias (unknown ones are rejected); idempotency_key is any string up to 200 characters. kind is fact, decision, procedure, handoff or note; valid_until is an ISO date or datetime (future, within 5 years) after which recall leaves the memory out. supersedes is the id of an older memory this one replaces (you must be able to edit it); that one then leaves default recall. agent and run_id (also on every change tool) label who saved it: agent is your own label, e.g. claude-code/reviewer, run_id groups one orchestrated run; up to 64 of a-z 0-9 . _ / - (lowercased). Provenance only: they never change who can read anything. kind=handoff is a note for another agent of the same run: it needs run_id, is shared with one project (project, or your only one), and expires after 7 days unless valid_until is sooner (at most 30).

recall (query, project?, team?, topics?, teams?, limit?, detail?, max_chars?, kind?, include_expired?, include_superseded?, run_id?)

Search memories the signed-in person may read. query is the semantic phrase. topics (sensitive-topic keys, names or ids) and teams (id, slug or name of a team the person belongs to) are explicit hard filters, not search text: every result must match each filter given, and a value that cannot be applied is reported in the result's filters block rather than silently ignored (nothing applies → no results). team/project are the older soft narrowing hints (unknown ones are ignored; the response's narrowed_by shows which applied); limit is 1-50 (default 10). detail is full (the default: each result's whole content) or brief (a 200-character preview instead; open one with get_memory). max_chars is 200-100000: a budget for the content or preview characters across results; when results are cut, truncated is true and hint says how to narrow. Every result carries a short why, a citation (date, scope, sensitivity) and, when known, its author, client and version. Use `list_teams` and `list_topics` to discover valid filters before searching. kind keeps one kind; memories past their valid_until are left out unless include_expired is true, and memories replaced by a newer one unless include_superseded is true (they come back with superseded: true, and superseded_by when the person can read the replacement). Handoff notes are left out unless kind is handoff; kind=handoff with run_id is that run's board: its notes newest first, brief by default, and project is a hard filter there. A run you cannot read looks the same as one that does not exist.

list_teams (kind?)

List the teams and projects the signed-in person's organization exposes — the valid values for `recall`'s team/project filters and `remember`'s filing targets. kind is teams, projects or all (default all). Never lists another organization's groups.

list_topics ()

List the organization's sensitive topics (HR, Legal, Finance and any the org added) — good `recall` query terms for guarded subjects. Read-only; only the caller's organization's topics.

explain_memory (memory_id)

Why a memory is or is not visible.

correct_memory (memory_id, new_content, reason?, kind?, valid_until?, agent?, run_id?)

Save a corrected new version (new_content up to 8000 characters). kind and valid_until replace the memory's when given; 'none' clears them; omitted, they carry over (a valid_until already past is dropped).

forget_memory (memory_id, reason?, confirm_human?, agent?, run_id?)

Forget a memory, only when the person asks: restorable during the trash period (30 days by default), then erased for good. It needs the person's own approval (confirm_human=true); without it the call is refused with confirm_required. For an outdated or duplicated memory, use supersede_memory or ask the person instead. Forgetting it again changes nothing and returns not-found.

list_memories (filter?, limit?, cursor?, kind?, agent?, run_id?)

Browse memories the person may read, newest first: one-line preview, scope, sensitivity and review state. filter is mine, needs_review, team, project or forgotten (soft-deleted, for restore_memory); limit is 1-100 (default 20); page with the returned next_cursor. kind keeps one kind; expired memories stay listed with expired: true. agent / run_id keep only what that agent or run saved (still only memories the person may read).

get_memory (memory_id)

Full detail of one memory, including its version history.

change_scope (memory_id, scope, team?, project?, reason?, confirm_widen?, confirm_human?, agent?, run_id?)

Change who may read a memory: organization (alias shared), personal (alias private), team or project (team/project take an id, slug, name or alias the person belongs to). A change that could give more people access (a wider scope, a different team or project, or an audience for a memory held back to its author) is refused with confirm_required until you ask the person and repeat the call with confirm_widen=true. On a flagged memory this connection saved, a change that does not narrow it needs the person's own approval (confirm_human=true).

change_sensitivity (memory_id, sensitivity, reason?, confirm_widen?, confirm_human?, agent?, run_id?)

Change a memory's sensitivity: public, internal, restricted or highly_restricted. Lowering it widens who can read the memory and needs the person's confirmation first (confirm_widen=true). On a flagged memory this connection saved, a change that does not narrow it needs confirm_human=true.

review_queue (limit?)

Flagged memories waiting for the person to review (limit 1-100, default 20). Each item's review_kind is audience (needs an audience), setup_gap (a sensitive topic not yet mapped to a team), instructions (reads like instructions to an AI; approving needs confirm_human) or fyi (already shared with a group, flagged only because classification was low-confidence).

review_memory (memory_id, action, scope?, team?, project?, sensitivity?, reason?, confirm_widen?, confirm_human?, agent?, run_id?)

Resolve a review: approve (it looks right), reroute (share it with a team, project or the organization — give scope, plus team/project for those) or tighten (a stricter sensitivity, or private when omitted; lowering the sensitivity needs confirm_widen). Only the author, an owner of its team or project, or an org admin can act; a change that could give more people access — a reroute that widens the memory or moves it to a different team or project, or a tighten that lowers its sensitivity — needs the person's confirmation (confirm_widen=true). Approving, rerouting or a tighten that does not narrow a memory this connection saved needs the person's own approval (confirm_human=true).

supersede_memory (memory_id, replaced_by, undo?, agent?, run_id?)

Mark memory_id as replaced by the newer memory replaced_by (for example after remember's related check says it updates one): the old memory leaves default recall and keeps its history. Same edit rule as correct_memory; undo=true removes the link. An unreadable memory is not found.

restore_memory (memory_id, agent?, run_id?)

Bring back a forgotten memory, within the trash period (30 days by default). Restoring an active memory (or restoring twice) is rejected and changes nothing.