← Back to Skills Marketplace

mem9.ai

Name: mem9.ai
Author: c4pt0r

by dongxu · GitHub ↗ · v1.0.45 · MIT-0

cross-platform ✓ Security Clean

833

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install mem9-ai

Description

Persistent cloud memory plugin for OpenClaw. This document routes setup, troubleshooting, and uninstall flows and defines config boundaries.

Usage Guidance

This skill appears internally consistent with its purpose as an OpenClaw memory plugin setup guide. Before installing, confirm you trust mem9.ai (review their privacy and data-retention docs), and be aware that enabling the documented hook (allowConversationAccess) lets the mem9 plugin read conversation messages for upload to their cloud. Expect the flow to ask for one explicit approval phrase (approve create / approve reconnect / approve uninstall) and to write specific openclaw.json keys (apiKey, provisionToken, possible provisionQueryParams). Do not paste other unrelated secrets into chat. If you proceed, back up your current openclaw.json, verify the dry-run preview exactly matches what you expect, and keep the generated/reconnected API key in a place you can revoke if needed.

Capability Analysis

Type: OpenClaw Skill Name: mem9-ai Version: 1.0.45 The mem9-ai skill bundle is a legitimate integration for a persistent cloud memory service (mem9.ai). It provides highly detailed, safety-conscious instructions for the AI agent to guide users through plugin installation, configuration, and uninstallation. Key security features include mandatory dry-run previews, explicit user approval gates (e.g., 'approve create'), and config read-backs to prevent accidental or unauthorized changes. While the plugin requests conversation access via the 'allowConversationAccess' hook, this is transparently disclosed and necessary for its stated function. The bundle uses standard OpenClaw and npm commands for package management and explicitly forbids the unauthorized scanning or uploading of local history files.

Capability Tags

requires-sensitive-credentials

Capability Assessment

✓ Purpose & Capability

The skill name/description (persistent cloud memory) matches the declared primary credential (MEM9_API_KEY) and the config keys it edits (plugins.entries.mem9.* and plugins.slots.memory). Nothing in the manifest asks for unrelated cloud credentials or system-level secrets.

ℹ Instruction Scope

The SKILL.md + SETUP/TROUBLESHOOTING/UNINSTALL docs limit actions to OpenClaw config writes, openclaw CLI operations, and an npm-native install path; they explicitly forbid uploading local history, direct memory API calls, probing the API key, or changing global npm config. One notable behavior: the setup flow preserves filtered remote SKILL.md URL utm_* query params and writes them into provisionQueryParams during create-new provisioning (attribution/tracking). That is coherent with the stated attribution rules but is something to be aware of because those params are forwarded into config and may be sent to mem9 during provisioning.

✓ Install Mechanism

This is instruction-only with no install spec and no bundled code files. The docs recommend using the official npm registry or an npmmirror one-shot fallback; they do not instruct downloading arbitrary archives or executing code from unknown hosts.

ℹ Credentials

Only MEM9_API_KEY is declared as the primary credential, which is appropriate. The instructions require writing a local provisionToken/provisionQueryParams to openclaw.json during create-new, and they recommend adding hooks.allowConversationAccess = true on newer OpenClaw versions so the mem9 plugin can access conversation messages during agent_end. Allowing that hook is required for automatic conversation upload but does grant the mem9 plugin access to chat content — this is proportional to a cloud memory plugin but worth user consideration.

✓ Persistence & Privilege

always:false and normal autonomous invocation are used. The skill only directs changing specific OpenClaw config keys within a narrowly defined scope and documents safe rollback/uninstall behavior. It does not request permanent platform-wide privileges or modify other skills' credentials.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install mem9-ai
After installation, invoke the skill by name or use /mem9-ai
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.45

fix openclaw 4.22+ allowConversationAccess compability issue

v1.0.38

Change a way to optimize CN network

v1.0.37

Cut the SKILL.md size

v1.0.30

Fix onboarding experience

v1.0.29

Update SKILL commands to improve recall stability

v1.0.28

Updated new version for ClawHub

v1.0.16

Rollback, will give the security-free version later :)

v1.0.15