# MemScope

> MemScope is governed organizational memory for AI, made by EigenAtom. ChatGPT, Claude, Cursor and other AI agents save explicit memories to one shared store over MCP or a REST API; AI only suggests labels, and the organization's deterministic policy decides which people can read each memory, so recall returns only what the signed-in person may see. It is for teams and organizations that want their AI assistants to share what they learn without HR, legal, executive or project knowledge leaking to the wrong people.

Key facts:

- Product: MemScope, by EigenAtom. Website: https://memscope.ai. Contact: contact@memscope.ai.

Pricing:

- Free Trial: $0 for 60 days, no credit card required; 3 connected users and 10,000 memories / month, every feature included.
- Team: $15 per connected user per month after the 60-day trial (billed per seat: pay only for people who connect an AI client); 20k memories / seat / month.
- Enterprise: custom limits, retention, SSO and procurement support; contact contact@memscope.ai.

Security model:

- Access is decided by a deterministic policy, never by AI: the same memory and the same person always get the same answer.
- AI only suggests labels (sensitivity, topic, tags); the organization's rules can only make a memory more private.
- No admin bypass: organization Owners and Admins manage people, teams and policy but still need to be in a memory's audience to read it.
- MemScope platform staff see XXX for memory content unless the customer grants time-limited (1 hour, 24 hours or 7 days), revocable, audited support access.
- Each organization is kept separate; forbidden and missing records return the same 404.
- Memory content never reaches logs; corrections create new immutable versions; changes are recorded in an append-only audit log.

Infrastructure and data:

- Hosted on DigitalOcean: MemScope runs on a DigitalOcean Kubernetes cluster in the NYC3 (New York) region and stores its data in DigitalOcean Managed PostgreSQL.
- Encrypted in transit: memscope.ai, app.memscope.ai, api.memscope.ai and mcp.memscope.ai are served over HTTPS (TLS), with certificates from Let's Encrypt. Inside the cluster, a network policy lets only the ingress controller reach the application.
- Encrypted at rest by the database provider: Stored data is protected by the managed database's disk encryption. MemScope does not use per-organization encryption keys.
- AI requests without retention: Requests to AI models go through OpenRouter and ask for zero data retention and no training. An organization setting turns external AI off for saving: new and corrected memories are then labelled, embedded and checked for duplicates by local models. It does not cover search: recall always sends the query to the external embedding model, and the query with the text of up to 40 candidate memories the searcher may read to the external decision model for ranking. Operator-set sensitivity limits can keep memories above a chosen level away from a provider; by default they allow every level.
- Forget, then erase: A forgotten memory leaves recall and listings at once. People allowed to can restore it for 30 days; after that its content is erased for good, unless it is on legal hold. The audit log keeps the record.
- Corrections keep history: A correction creates a new version. Earlier versions are kept and shown only to people allowed to read them.
- Permanent purge: An organization owner can permanently purge a memory, or every memory a member wrote. The content of every version and its search embeddings are destroyed; only a record without content (ids, timestamps, audit history) remains.
- Export: Any member can download a JSON export of the memories they are allowed to read.
- Operational logs: Request and tool-call logs hold ids, never memory content, and are deleted after 30 days.

Subprocessors:

- DigitalOcean: Hosting: the Kubernetes cluster, the managed PostgreSQL database and DNS.
- OpenRouter: Routes AI requests (labels, duplicate checks, search embeddings and ranking) to model providers, asking for zero data retention and no training.
- Stripe: Subscription billing, checkout and the billing portal.
- Resend: Transactional email: email verification, password resets and invitations.
- Google Analytics: Website analytics, loaded only after a visitor allows it.

Connect:

- Remote MCP server: https://mcp.memscope.ai/mcp (streamable HTTP, OAuth 2.1 sign-in by the human; no API key, nothing to install).
- Works with ChatGPT, Claude, Cursor, VS Code, Codex, Gemini CLI, Windsurf and custom agents.
- REST API: https://api.memscope.ai (OpenAPI: https://api.memscope.ai/openapi.json).

## Docs

- [Product](https://memscope.ai/product.md): what MemScope does: explicit writes, AI-suggested labels, policy-decided access
- [How it works](https://memscope.ai/how-it-works.md): save, label, apply your rules, recall
- [Pricing](https://memscope.ai/pricing.md): free for 60 days, then $15 per connected user per month
- [Security](https://memscope.ai/security.md): deterministic access, no admin bypass, staff see XXX, audit, how to report an issue
- [Docs](https://memscope.ai/docs.md): connect ChatGPT and MCP clients, the MCP tools and the REST API
- [FAQ](https://memscope.ai/faq.md): short answers: what it is, who it's for, access, admins, price, connecting, deletion, data location
- [About](https://memscope.ai/about.md): EigenAtom, the company that makes MemScope, and how to reach us

## Connect

- [MCP setup for AI agents](https://memscope.ai/agents): the exact command or config per client
- [Install guide (Markdown)](https://memscope.ai/agents.md): the full agent install instructions and tool list
- [MCP server](https://mcp.memscope.ai/mcp): remote MCP endpoint, streamable HTTP, OAuth 2.1
- [OpenAPI](https://api.memscope.ai/openapi.json): the REST API schema

## Optional

- [Full text](https://memscope.ai/llms-full.txt): this fact sheet, the install guide and the key pages in one file
- [Home](https://memscope.ai/index.md): the landing page
- [Subprocessors](https://memscope.ai/security#subprocessors): the third-party services MemScope uses
- [Privacy Notice](https://memscope.ai/privacy.md): what MemScope collects, subprocessors, cookies, retention and privacy rights
- [Terms of Service](https://memscope.ai/terms.md): the terms for using MemScope during the public beta
- [security.txt](https://memscope.ai/.well-known/security.txt): security contact