Model Context Protocol Memory MCP Server

The MCP reference server's Memory MCP server provides AI agents with a persistent, graph-based knowledge graph memory layer across conversation sessions. It enables agents to store entities, map complex relational connections between concepts, dynamically store updated observations, and retrieve contextual historical memories during multi-turn interactions.

Start for free

Benefits with Ory + Model Context Protocol Memory MCP Server

The Memory MCP reference server from the Model Context Protocol project gives your agents a persistent knowledge graph of people, projects, and facts that carries across sessions. Whatever one agent writes there, every other agent reads later, so a careless or manipulated write can mislead all of them. Ory Agent Security lets a trusted assistant record facts while other agents can only read the graph, with every change attributed to the agent and user behind it.

View on GitHub

Use Cases

— 01 use case

Agent IAM

Let the assistant record facts at Write, keep untrusted summarizers at Read or Block, and save Admin for whoever prunes old memories.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Memory MCP reference server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for agents that recall stored context, write for the trusted assistant that records facts, admin for maintenance agents, and no access for agents that summarize untrusted content.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied memory write stops before it reaches the knowledge graph, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents write to shared memory and for whom without blocking anything, so you can apply Ory's pre-built policy for the Memory MCP reference server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Memory MCP reference server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent stored a fact that every other agent now relies on.