← 返回 Skills 市场
sebbsssss

Clude Memory MCP

作者 Sebastien Sim · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
584
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install clude-memory-mcp
功能描述
MCP server for Clude's 4-tier cognitive memory system — store, recall, search, and dream. Built on Supabase + pgvector with type-specific decay, Hebbian asso...
使用说明 (SKILL.md)

Clude Memory MCP

MCP server exposing a 4-tier cognitive memory architecture inspired by Stanford's Generative Agents (Park et al. 2023).

Tools

recall_memories

Search the memory system. Returns scored memories ranked by relevance, importance, recency, and vector similarity.

  • query — text to search against memory summaries
  • tags — filter by tags
  • related_user — filter by user/agent ID
  • memory_types — filter by type: episodic, semantic, procedural, self_model
  • limit — max results (1-20, default 5)
  • min_importance — minimum importance threshold (0-1)

store_memory

Store a new memory. Memories persist across conversations, decay over time if not accessed, and get committed to Solana.

  • typeepisodic (events), semantic (knowledge), procedural (behaviors), self_model (identity)
  • content — full memory content
  • summary — short summary for recall matching
  • tags — tags for filtering
  • importance — importance score 0-1
  • source — origin identifier (e.g. mcp:my-agent)

get_memory_stats

Get statistics: counts by type, average importance/decay, dream session history, top tags.

get_market_mood

Get current market mood and price state (no LLM call).

ask_clude

Ask Clude a question and get an in-character response. Calls Claude API.

Setup

npm install clude-bot

Requires a Supabase project with the schema from supabase-schema.sql. Set SUPABASE_URL and SUPABASE_SERVICE_KEY environment variables.

Architecture

  • 4-tier memory: episodic (7%/day decay), semantic (2%/day), procedural (3%/day), self_model (1%/day)
  • Hybrid retrieval: pgvector cosine similarity + keyword matching + tag scoring
  • Dream cycles: consolidation, reflection, emergence — every 6 hours
  • On-chain commitment: SHA-256 hashed memories committed to Solana via memo transactions
  • Granular decomposition: per-fragment embeddings for precise sub-memory retrieval

License

MIT

安全使用建议
This skill is not obviously malicious but has several red flags. Before installing: (1) Do not provide your SUPABASE_SERVICE_KEY unless you trust the code — that key grants full DB access; prefer a scoped DB role. (2) Ask the author for full source for the missing modules (../core/*, ../config) and for a repository/homepage. (3) Clarify where Claude and Solana credentials are expected and what on-chain actions (and fees) will occur; do not use a real wallet/private key in testing. (4) Inspect the npm package 'clude-bot' on the registry before running npm install. (5) Decide if you consent to potentially persisting conversational content and sending it to external services; if not, run in an isolated environment or decline. If the author provides a repo, declared env list updates (including CLAUDE_*/SOLANA_*/RPC variables), and a scoped Supabase role, that would reduce risk; absent that, treat this as suspicious.
功能分析
Type: OpenClaw Skill Name: clude-memory-mcp Version: 1.0.0 The skill implements a cognitive memory system with tools for storing, recalling, and analyzing memories, market mood, and interacting with the Claude API. It requires `SUPABASE_URL` and `SUPABASE_SERVICE_KEY` environment variables, which are used for its stated purpose of connecting to a Supabase database. Input validation is handled via `zod`. The `supabase-schema.sql` defines a robust database schema with vector search capabilities and no apparent SQL injection vulnerabilities. While the `SKILL.md` mentions `npm install clude-bot`, the provided `server.ts` does not directly import or use this package, and there is no evidence of malicious intent or functionality within the analyzed files themselves (e.g., data exfiltration, backdoors, or prompt injection against the OpenClaw agent).
能力评估
Purpose & Capability
Name/description describe a Supabase + pgvector memory MCP — requiring node and SUPABASE_URL + SUPABASE_SERVICE_KEY is expected. However the code and SKILL.md also reference actions that require additional credentials (Claude API calls, on-chain Solana commits, handling token/tweet events) but no corresponding environment variables are declared. The skill therefore asks for high-privilege DB access while omitting other credentials it clearly needs.
Instruction Scope
SKILL.md instructs installing 'clude-bot' and setting SUPABASE_URL/SUPABASE_SERVICE_KEY, and documents features that will call Claude and commit hashed memories to Solana. The instructions do not disclose that conversational content will be persisted, potentially sent to an LLM (Claude), and committed (hashed) on-chain (which can be irreversible and cost SOL). The runtime code returns full memory content in tool outputs, so sensitive user data could be stored and transmitted; the SKILL.md does not warn or require consent or list additional env keys.
Install Mechanism
There is no automated install spec (lower automated risk). But SKILL.md tells users to run 'npm install clude-bot' — an external package name with no homepage/source in the registry metadata. Installing that package would execute remote code from npm (moderate risk). Also included server.ts imports many local modules (../core/*, ../config) that are not present in the bundle, suggesting incomplete packaging or hidden dependencies that would need to be fetched.
Credentials
The skill requires SUPABASE_SERVICE_KEY: a powerful service_role key that grants full DB access (read/write and bypasses RLS). For a server process this can be justified, but it is high privilege and should be minimized or scoped. The skill also clearly needs other secrets (LLM API key, Solana signer or RPC credentials) that are not declared — omission of these sensitive envs is a mismatch and increases risk because hidden secrets usage could be required or added later.
Persistence & Privilege
The skill does not request 'always: true' and does not appear to change other skills or global agent settings. However it stores persistent user/agent memories in a database and may autonomously commit hashes on-chain and call external LLMs. Autonomous invocation combined with a Supabase service key increases the blast radius if misused — consider restricting runtime privileges and authorizations.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clude-memory-mcp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clude-memory-mcp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — 4-tier cognitive memory system with recall, store, stats, mood, and ask tools
元数据
Slug clude-memory-mcp
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Clude Memory MCP 是什么?

MCP server for Clude's 4-tier cognitive memory system — store, recall, search, and dream. Built on Supabase + pgvector with type-specific decay, Hebbian asso... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 584 次。

如何安装 Clude Memory MCP?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clude-memory-mcp」即可一键安装,无需额外配置。

Clude Memory MCP 是免费的吗?

是的,Clude Memory MCP 完全免费(开源免费),可自由下载、安装和使用。

Clude Memory MCP 支持哪些平台?

Clude Memory MCP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clude Memory MCP?

由 Sebastien Sim(@sebbsssss)开发并维护,当前版本 v1.0.0。

💬 留言讨论