Auditable memory for AI agents: provable deletion, tamper-evident audit, time-travel recall.
Connect Runs on your machine
claude mcp add attestari -e ATTESTARI_KEK=<ATTESTARI_KEK> -e ATTESTARI_DATABASE_URL=<ATTESTARI_DATABASE_URL> -e ATTESTARI_SQLITE_PATH=<ATTESTARI_SQLITE_PATH> -e ATTESTARI_MCP_ALLOW_FORGET=<ATTESTARI_MCP_ALLOW_FORGET> -e ANTHROPIC_API_KEY=<ANTHROPIC_API_KEY> -- uvx attestari==0.0.8{
"mcpServers": {
"attestari": {
"command": "uvx",
"args": [
"attestari==0.0.8"
],
"env": {
"ATTESTARI_KEK": "<ATTESTARI_KEK>",
"ATTESTARI_DATABASE_URL": "<ATTESTARI_DATABASE_URL>",
"ATTESTARI_SQLITE_PATH": "<ATTESTARI_SQLITE_PATH>",
"ATTESTARI_MCP_ALLOW_FORGET": "<ATTESTARI_MCP_ALLOW_FORGET>",
"ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>"
}
}
}
}{
"mcpServers": {
"attestari": {
"command": "uvx",
"args": [
"attestari==0.0.8"
],
"env": {
"ATTESTARI_KEK": "<ATTESTARI_KEK>",
"ATTESTARI_DATABASE_URL": "<ATTESTARI_DATABASE_URL>",
"ATTESTARI_SQLITE_PATH": "<ATTESTARI_SQLITE_PATH>",
"ATTESTARI_MCP_ALLOW_FORGET": "<ATTESTARI_MCP_ALLOW_FORGET>",
"ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>"
}
}
}
}{
"servers": {
"attestari": {
"type": "stdio",
"command": "uvx",
"args": [
"attestari==0.0.8"
],
"env": {
"ATTESTARI_KEK": "<ATTESTARI_KEK>",
"ATTESTARI_DATABASE_URL": "<ATTESTARI_DATABASE_URL>",
"ATTESTARI_SQLITE_PATH": "<ATTESTARI_SQLITE_PATH>",
"ATTESTARI_MCP_ALLOW_FORGET": "<ATTESTARI_MCP_ALLOW_FORGET>",
"ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
ATTESTARI_KEKOptional, secret | Base64 32-byte root key. Set it to enable encryption at rest and cryptographic erasure (forget() destroys the subject's key and signs the certificate). Without it, forget() is a logical delete and certificates are left unsigned. |
ATTESTARI_DATABASE_URLOptional, secret | Postgres DSN. Set it to use Postgres + pgvector instead of the default local SQLite file (concurrent access, indexed hybrid search). |
ATTESTARI_SQLITE_PATHOptional | Where the default SQLite ledger lives. |
ATTESTARI_MCP_ALLOW_FORGETOptional | Set to 1 to offer the forget_subject tool (off by default, since erasure is irreversible and an agent can be steered by what it reads). When on, it is flagged destructive and takes two calls: a preview that returns a manifest hash, then a confirmation that passes it back. |
ANTHROPIC_API_KEYOptional, secret | Enables Claude-powered fact extraction; falls back to the built-in regex extractor when unset. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 9 Oct 2026 |
| Last updated | 9 Oct 2026 |
| Registry name | io.github.attestari/attestari |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.