Mem
by Mem
Search, create and organise a Mem personal knowledge base from your AI assistant. Two OAuth scopes separate reading from writing, but nothing separates writing from deleting — and one tool deletes a note permanently.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Mem via MCP
https://mcp.mem.ai/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Mem Tools & Capabilities (15)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- Permanent deletion is one grant away.
content.writecovers creation, editing, trashing and irreversible deletion in a single approval. Mem's own security guidance recommends keeping human confirmation enabled for destructive actions, which is a client setting rather than a server one. - Note creation is metered. Mem's pricing page sets the free plan at 25 notes per month, 25 messages to its agent, and search across 25 PDF pages per month. Exceeding a plan quota returns 429 with
quota_exceeded, distinct from an ordinary rate limit. - Rate limits are documented and tight. 100 requests per minute and 4,000 per day, plus a complexity budget of 200 per minute and 8,000 per day. Mem states that limits are still evolving.
- Search is bounded, not exhaustive. Mem documents search results as coming from a bounded snapshot capped at a 100-result window, so a query over a large notebook returns the top matches rather than everything that matches.
- Updates replace the whole note.
update_noterequires the full markdown body and the exact currentversion; partial patch semantics are not supported. A summarising assistant will overwrite what it did not reproduce. - Trashed notes are read-only until restored. Mem documents that a trashed note must be restored before it can be updated or have its creation date changed, while
get_notestill returns it with atrashed_atfield. - No per-note or per-collection access control. The grant covers the connected workspace. There is no scope, tool parameter or documented mechanism to expose one collection and withhold another. Mem's own suggested mitigation is to connect a dedicated workspace or test account holding only the data you want tools to reach.
- Google sign-in only. Mem's pricing FAQ states it uses Google Authentication, so only Google or Google Workspace accounts can sign in, with non-Google authentication described as a future plan.
- Not end-to-end encrypted. Mem states data is encrypted at rest with AES-256 and in transit with TLS but is not end-to-end encrypted, because its product depends on processing note content.
- We could not read tool schemas or annotations. The endpoint returned an authentication challenge, so parameter detail and safety hints are not published here. The tool list comes from Anthropic's directory and Mem's documentation.
Frequently asked questions
Can the Mem MCP server delete my notes permanently?
Yes. Anthropic's directory lists delete_note, and Mem's API reference describes the underlying endpoint as permanent, stating hard-deleted notes cannot be restored. The recoverable path is separate: trash_note soft-deletes and restore_note reverses it. Mem's own MCP tool page documents the trash and restore pair but does not list delete_note at all.
Does Mem MCP need a paid plan?
Not to connect, but the free tier is tightly metered. Mem's pricing page allows 25 notes each month on the free plan and lists API access as a Mem Pro feature at twelve dollars monthly. Mem's rate-limit documentation states a plan's monthly note creation allowance returns HTTP 429 with an error type of quota_exceeded.
Can Mem MCP share a note with someone else?
No. No tool in Mem's documented MCP surface shares a note, invites a collaborator or publishes anything, and Mem's public OpenAPI specification contains no share, invite or publish path. One tool does emit a link: get_note_attachment_download_url returns a temporary signed URL to an attached file, which anyone holding it can fetch.
Does Mem train AI models on my notes?
No, on Mem's published account. Mem's privacy policy states it does not use your personal information or notes to develop, improve or train any generalized AI or ML models. A dedicated MCP section adds that Mem does not use integration queries to train AI models. That governs Mem only, not the AI provider you connect.
What can Claude read once I connect Mem?
Anything in the connected workspace, plus files attached to those notes. Mem's attachment type list covers PDFs, images, audio recordings, calendar events and emails, and separate tools return OCR text and audio transcripts. A personal notebook is arbitrary-sensitivity data, so treat the grant as workspace-wide rather than note-by-note.
Can I grant read-only access to Mem?
In principle yes. Mem's OAuth resource descriptor advertises exactly two scopes, content.read and content.write, so reading is expressible without writing. Whether your client offers that choice is a separate question, since most MCP clients request the full advertised set. There is no third scope, so writing and deleting cannot be separated.
Why does a Mem tool call fail with 429?
You have hit either a rate limit or a plan quota, and Mem returns 429 for both. Its documented request limits are 100 per minute and 4,000 per day, with a parallel complexity budget of 200 per minute. Quota responses carry an error type of quota_exceeded and a reset time, and Retry-After reflects it.
Sources
- Mem MCP overview (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem MCP supported tools (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem MCP setup and troubleshooting (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem MCP security best practices (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem API rate limits (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem API changelog (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem OpenAPI specification (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem privacy policy (retrieved 2026-08-21) · retrieved 2026-08-21
- Mem pricing (retrieved 2026-08-21) · retrieved 2026-08-21
- Live OAuth posture check: authentication challenge at
https://mcp.mem.ai/mcp, plus RFC 9728 resource metadata athttps://mcp.mem.ai/.well-known/oauth-protected-resourceand authorization server metadata athttps://api.mem.ai/.well-known/oauth-authorization-server(2026-08-21) · retrieved 2026-08-21 - Anthropic Connectors Directory entry (snapshot 2026-08-16) · retrieved 2026-08-16
docs.mem.ai/robots.txtpublishesContent-Signal: ai-train=yes, search=yes, ai-input=yes— a full publisher opt-in, including express permission for AI synthesis (retrieved 2026-08-21) · retrieved 2026-08-21
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- Mem
- Tools
- 15
- Domain
- mcp.mem.ai
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.