How do I install Verified Repo Memory?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Verified Repo Memory need an API key?

The publisher lists these environment variables: VRM_TTL_DAYS, VRM_DATA_DIR, VRM_MAX_FILE_BYTES, VRM_SECRET_SCAN.

What transport does Verified Repo Memory use?

Verified Repo Memory runs locally over stdio.

Verified Repo Memory MCP server

Q: When was Verified Repo Memory last checked?

Last checked 2026-11-09. Stale-proof repository memory with citations + just-in-time verification + TTL (repo-scoped).

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

npx -y @cognitivemyriad/[email protected]

Credentials from the publisher

VRM_TTL_DAYS — Default TTL in days (1-365).
VRM_DATA_DIR — Override data dir path.
VRM_MAX_FILE_BYTES — Max file parsing size bytes.
VRM_SECRET_SCAN — Enable secret scan (on/off).

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1VRM_TTL_DAYS=<value> VRM_DATA_DIR=<value> VRM_MAX_FILE_BYTES=<value> VRM_SECRET_SCAN=<value> claude mcp add io.github.cognitivemyriad-verified-repo-memory -- npx -y @cognitivemyriad/vrm-local@0.1.2

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.cognitivemyriad-verified-repo-memory": {4      "command": "npx",5      "args": [6        "-y",7        "@cognitivemyriad/[email protected]"8      ],9      "env": {10        "VRM_TTL_DAYS": "<value>",11        "VRM_DATA_DIR": "<value>",12        "VRM_MAX_FILE_BYTES": "<value>",13        "VRM_SECRET_SCAN": "<value>"14      }15    }16  }17}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version: 0.1.2

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

Verified Repo Memory MCP v0.1.2

Stale-proof repository memory with citations + just-in-time verification + TTL (repo-scoped).

An MCP server providing "safe memory" for AI coding agents. Memories are scoped per repository, backed by code citations, and verified just-in-time so an agent never receives stale information when the underlying code has changed.

Quickstart

Run via npx:

npx -y @cognitivemyriad/vrm-local --repo /path/to/repo

(Alternatively, run from source: npm ci && npm run build && node build/index.js --repo /path/to/repo)

Tools

vrm_store: Store a new memory with file citations.
vrm_search: Search for candidate memories by keywords.
vrm_retrieve: JIT-verify candidates and return only valid memories. (Main tool for agents)
vrm_list: List memories by status (valid, stale, missing).
vrm_forget: Manually delete a memory.

Example I/O

Store: Input:

{
  "subject": "API version sync",
  "fact": "When changing API version, update client/server/docs together.",
  "citations": [{ "path": "src/api.ts", "startLine": 10, "endLine": 15 }]
}

Output:

{
  "stored": true,
  "memoryId": "uuid-...",
  "expiresAt": "2026-03-21T00:00:00Z"
}

Retrieve: Input:

{ "query": "API version" }

Output:

{
  "query": "API version",
  "valid": [ ... ],
  "stats": { "verified": 1, "validCount": 1 }
}

How it works

graph TD
    A[Agent] -->|Store Fact + Citation| B(Verified Repo Memory)
    B --> C{Save to Disk}
    C -->|Hash Code Snippet| D[(memories.json)]
    
    A -->|Retrieve Fact| B
    B --> E{JIT Verification}
    E -->|Check File Hash| F{Unchanged or Relocated?}
    F -->|Yes| G[Return VALID Memory]
    F -->|No| H[Return STALE/MISSING]

Citations: Every fact is linked to a file path and a line range. The exact code snippet is hashed and saved.
JIT Verification: Before returning a memory to the agent in vrm_retrieve, the server checks the physical file. If the snippet has moved, it relocates the citation. If it has been changed or deleted, the memory is marked STALE/MISSING and omitted from the results.
TTL (Time-To-Live): Memories expire automatically (default 28 days) unless they are successfully retrieved and utilized, which extends their life.

Data location

Data is strictly repo-scoped and saved in: <repoRoot>/.verified-repo-memory

This includes memories.json and a fingerprint/metadata file to prevent accidental cross-repo pollution. Add this directory to your .gitignore.

Security

No Network Transmissions: This is a stdio local-only server without HTTP calls.
Path Security: Disallows any path traversal (../) out of the repository root, as well as accessing .git/ or .verified-repo-memory/.
No Stdout Pollution: Strict logging only to stderr.
Secret Scan: Built-in heuristic secret scanning to reject memories that look like API keys/private keys (can be disabled via --no-secret-scan).

Usage with Claude

Claude Desktop

To add this server to the Claude Desktop app, edit your configuration file:

On macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
On Windows: %APPDATA%\Claude\claude_desktop_config.json

Add the following configuration:

{
  "mcpServers": {
    "verified-repo-memory": {
      "command": "npx",
      "args": [
        "-y",
        "@cognitivemyriad/vrm-local",
        "--repo",
        "/absolute/path/to/your/repo"
      ]
    }
  }
}

Claude Code

To add this server to Claude Code using stdio transport:

claude mcp add mcp-verified-repo-memory --transport stdio -- npx -y @cognitivemyriad/vrm-local

Note for Windows users: You may need to prepend cmd /c to the command:

claude mcp add mcp-verified-repo-memory --transport stdio -- cmd /c npx -y @cognitivemyriad/vrm-local

Publishing Guide

This section explains how to publish the package to NPM and register it with the Anthropic MCP Registry so that it becomes publicly available.

Step 1: Publish to NPM

NPM (Node Package Manager) is the package distribution platform. Publishing here allows anyone to install your tool with a single command.

Prerequisites

An NPM account (free)
Two-factor authentication (2FA) enabled on your NPM account
Node.js installed on your machine

Procedure

1. Log in to NPM from the terminal:

npm login

A browser window will open. Sign in with your NPM account. When prompted, enter your 2FA code from your authenticator app.

2. Publish the package:

npm publish --access public

This command does the following:

Compiles TypeScript → JavaScript (npm run build)
Creates a .tgz archive of the compiled files
Uploads the archive to https://registry.npmjs.org/

3. Verify the publication:

Visit https://www.npmjs.com/package/@cognitivemyriad/vrm-local in your browser. Your package page should appear.

Note: If you need to re-publish, you must increment the version number in package.json and server.json first (npm version patch). NPM does not allow overwriting existing versions.

Step 2: Register with Anthropic MCP Registry

The MCP Registry is Anthropic's official directory of MCP servers. Registering here allows Claude Desktop, Claude Code, and other MCP clients to discover and install your server.

Important: The NPM package must be published first (Step 1). The MCP Registry validates that the NPM package exists before accepting the registration.

Prerequisites

A GitHub account (used for authentication only)
The mcp-publisher CLI tool

Installing mcp-publisher

# macOS (Homebrew)
brew install nicholasgriffintn/tap/mcp-publisher

# Or via npx (no install required)
npx @anthropic-ai/mcp-publisher

Procedure

1. Log in to the MCP Registry via GitHub:

mcp-publisher login github

A browser window will open. Authorize the application with your GitHub account.

2. Publish to the MCP Registry:

mcp-publisher publish

This command reads server.json in the current directory and registers the server with the MCP Registry. The registry will:

Validate the server.json schema
Check that the NPM package exists and is accessible
Register the server metadata (name, description, version, environment variables)

3. Verify the registration:

Visit https://registry.modelcontextprotocol.io and search for your server name.

Note: Once a version is published to the MCP Registry, it is immutable and cannot be changed. To publish updates, increment the version in both package.json and server.json, publish to NPM first, then run mcp-publisher publish again.

Version Management

When releasing a new version, always update the version number in all three locations:

# 1. Bump version in package.json
npm version patch  # 0.1.2 → 0.1.3

# 2. Update server.json (both top-level and packages[].version)
# Edit server.json manually to match the new version

# 3. Publish
npm publish --access public
mcp-publisher publish

File	Field	Must Match
`package.json`	`version`	✅
`server.json`	`version` (top-level)	✅
`server.json`	`packages[0].version`	✅

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Verified Repo Memory?

Does Verified Repo Memory need an API key?

What transport does Verified Repo Memory use?

When was Verified Repo Memory last checked?

Documentation

Verified Repo Memory MCP v0.1.2

Quickstart

Tools

Example I/O

How it works

Data location

Security

Usage with Claude

Claude Desktop

Claude Code

Publishing Guide

Step 1: Publish to NPM

Prerequisites

Procedure

Step 2: Register with Anthropic MCP Registry

Prerequisites

Installing mcp-publisher

Procedure

Version Management