What is an MCP memory server?
An MCP memory server is a program that gives AI agents persistent memory through the Model Context Protocol (MCP), the open standard agents like Claude Code, Codex and Claude Desktop use to call outside tools. The agent calls tools such as “write memory” and “search memory”; the server stores the entries, so they outlast the session.
Morphika is a remote MCP memory server at https://mcp.morphika.ai/mcp, with a read-only address at https://mcp.morphika.ai/read/mcp. It adds security controls a plain memory store doesn't have: approval for shared writes, a hash-chained audit log, and OAuth sign-in instead of API keys.
About Morphika: Morphika is secure, shared memory for personal AI agents like Claude Code, Codex and Claude Desktop. How it is secured.
How does an MCP memory server work?
- Step 1: You register the server with your agent: a command for a local server, a URL for a remote one.
- Step 2: The agent asks the server which tools it offers and shows them to the model.
- Step 3: When the model decides to remember or recall something, it calls a tool, for example
memory_writeormemory_search. - Step 4: The server does the work and returns a result, which the model reads.
Local or remote: which kind do I need?
| Local server | Remote server | |
|---|---|---|
| Runs | On your machine, as a process your agent starts | On the internet, over Streamable HTTP |
| Reachable from | That machine only | Any agent, on any machine, that can sign in |
| Sign-in | Usually none, or a key in a config file | Usually OAuth in the browser |
| Good for | One agent on one computer | Several agents, several machines, a team |
Morphika is remote, so the same memory reaches Claude Code on your laptop, Codex on another machine and Claude Desktop, and cloud-hosted agents that can only reach public URLs.
How does sign-in work?
Morphika uses OAuth 2.1 with PKCE, the flow MCP specifies for remote servers. Your agent registers itself, opens a browser page, you sign in and click Authorize, and the agent receives a short-lived access token bound to the address you connected. Nothing is copied or pasted, and each connection can be revoked on its own from the dashboard.
What are Morphika's addresses?
| Address | Tools | Use it for |
|---|---|---|
https://mcp.morphika.ai/mcp | 23 | Your own agents: full memory, documents, approvals, audit and workspaces, in your personal space |
https://mcp.morphika.ai/read/mcp | 7 | Agents that should only read and search, such as ones that browse the web. No writes, forgets or deletes |
| A workspace's own URL (from the dashboard) | 23 | A team workspace. Writes wait for another member's approval |
The address decides what a connection can do. A tool argument never can: that is deliberate, so text an agent reads can't talk it into another workspace.
What tools does Morphika provide?
| Group | Tools | What they do |
|---|---|---|
| Memory | memory_write, memory_read, memory_list, memory_search, memory_history, memory_forget, profile_get | Save an entry (optionally with an expiry date, or as a replacement for an older one), read one by key, list what you can see (summaries, newest first), and search by keyword, by meaning, or both. See an entry's version history, forget one entry, and read the profile: the standing context every session starts with. |
| Documents | document_list, document_read, document_delete | Find and read the text of documents uploaded in the dashboard, and delete one you uploaded. Uploading documents is not switched on yet, so there are none to find. |
| Approvals | approvals_pending, approval_resolve, approvals_history | See what is waiting for a person, approve or deny it (never your own request), and look back at past decisions. |
| Audit | audit_query, audit_verify | Query the audit log, and re-check its hash chain to confirm nothing was altered. |
| Workspaces | workspaces, workspace_create, workspace_join, workspace_members, workspace_invite, workspace_member_remove | List, create and join workspaces; see members; create one-time invite codes and remove members (owners only). |
| Connections | connector_revoke, connector_revocations | Cut off one of your connected agents, immediately and permanently, and list the ones you have revoked. |
Search works by keyword, by meaning, or both (the default). Meaning-based search uses an embedding model that runs on Morphika's own server, so memory content and queries are not sent to an outside embedding service.
What does Morphika not do?
- There is no bulk delete.
memory_forgetforgets one entry per call: it is hidden at once, and the stored entry is erased only when your account is deleted (for a shared workspace entry, when that workspace is deleted). Memory is versioned: saving to the same key creates a new version, and the history keeps a record of each version, not its old text. You can delete your whole account and personal memory yourself. - There are no tags. Entries have a key, a value and a short summary.
- It is not open to everyone yet: Morphika is in a private pilot, invite only.
Sources
Sources checked September 25, 2026.
Related guides
Published September 25, 2026 · Last updated