For agents
MCP tool reference
MemoMe speaks Model Context Protocol over streamable HTTP. A person connects a client once in a browser; after that the Agent calls these tools directly. Access is per device and can be revoked without touching any other connection.
An authorized Agent can read complete private values.
We say so plainly rather than implying otherwise. What that means.
Find things
Always the first call. Search returns candidates with their source; fetch opens one of them.
| What it does | |
|---|---|
| search | One query across records, tasks and private-item metadata. Never returns a private value. |
| fetch | Open one result by id and read its body, with the source preserved. |
| connection_status | What this connection is currently allowed to do. |
Write things down
Ordinary material. A bug, a decision or a half-finished errand is a task, not a note.
| What it does | |
|---|---|
| save_note | Create or update an ordinary record. |
| save_task | Create or update something that still has to happen. |
| add_task_comment | Add progress to an existing task. |
| import_document | Bring a long page in as it is, without splitting it into cards first. |
Keep it findable
Optional. Organization is never required before something can be saved.
| What it does | |
|---|---|
| organize | Apply labels and placement in one call. |
| save_project | Group work that belongs together. |
| save_notebook | Collect records a person reads as one set. |
| add_relationship | Say that two records belong to each other. |
| list_projects | List projects the connection can see. |
| archive_note | Take something out of the way without deleting it. |
Private values
These are the calls that touch material a person deliberately protected. A connected Agent may use them on that person's instruction; every one of them is logged.
| What it does | |
|---|---|
| save_private_item | Store a value that is already present in the current task. Never invent or guess one. |
| read_private_item | Read a stored private value on the person's instruction. |
| open_private_item | Hand the person a short-lived way to open a value themselves. |
| get_private_retrieval_status | Check what may be retrieved before attempting it. |
| delete_private_item | Remove a private record permanently. |
| consume_recovery_code | Mark one recovery code as used. |
Encrypted files
Whole files rather than fields. Uploads reserve their bytes before the transfer starts.
| What it does | |
|---|---|
| create_upload | Begin an authenticated upload. |
| save_encrypted_file | Finish storing an encrypted file. |
| update_encrypted_file | Replace the contents of one. |
| delete_encrypted_file | Remove one permanently. |
Rules an Agent should follow
How to use these without making things up.
Search, then fetch, before relying on anything stored. Do not answer from memory of an earlier session.
One submission is one item. Do not split a device, a page or a chapter into several records unless asked.
Preserve the original wording, exact values, leading zeros, order and any stated uncertainty. Never fill in a missing fact.
A private value that appears in the current task may go into save_private_item's value. It must never be repeated into metadata, a title, a comment or a confirmation message.
Recording a problem is a task even when nobody said the word “fix”.