# inspeximus: agent memory with provenance, GDPR erasure and a tamper-evident audit trail

Persistent memory for AI agents with verifiable audit trails and permanent corrections. Keeps stale data retired and generates proof for GDPR deletions.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 8
- Author: DanceNitra
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/DanceNitra/inspeximus
- Updated: 2026-10-22
- HTML: https://affpapa.org/en/nevibecode/mcp/inspeximus-agent-memory-with-provenance-gdpr-erasure-and-a-tamper-evident-audit

## What it does

The server saves agent knowledge directly into a local SQLite database. When a value is updated with `remember` under a key, the earlier version is retired permanently. Repeating outdated phrasing will not revive it. If a change needs undoing, `revert` logs that rollback as a deliberate decision.

Agent activities feed into a hash-linked ledger marked with RFC 3161 timestamps. The core engine fits in a single Python file with no dependencies. Cryptographic checks need the optional `inspeximus[crypto]` package.

GDPR erasure proofs apply strictly to this SQLite database file. External vector databases, prompt logs and server backups remain untouched, so those systems require separate handling.

## Requirements
- Needs: Python and uv (commands run via uvx)
- Environment variables: `INSPEXIMUS_PATH`, `INSPEXIMUS_ECHO_GUARD`, `INSPEXIMUS_EMBED_URL`, `INSPEXIMUS_EMBED_MODEL` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env INSPEXIMUS_PATH=<INSPEXIMUS_PATH> --env INSPEXIMUS_ECHO_GUARD=<INSPEXIMUS_ECHO_GUARD> --env INSPEXIMUS_EMBED_URL=<INSPEXIMUS_EMBED_URL> --env INSPEXIMUS_EMBED_MODEL=<INSPEXIMUS_EMBED_MODEL> --transport stdio inspeximus-agent-memory-with-provenance-gdpr-erasure-and-a-tamper-evident-audit -- uvx inspeximus
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from inspeximus <command>

### Codex

**Platform CLI**
```bash
codex mcp add inspeximus-agent-memory-with-provenance-gdpr-erasure-and-a-tamper-evident-audit --env INSPEXIMUS_PATH=<INSPEXIMUS_PATH> --env INSPEXIMUS_ECHO_GUARD=<INSPEXIMUS_ECHO_GUARD> --env INSPEXIMUS_EMBED_URL=<INSPEXIMUS_EMBED_URL> --env INSPEXIMUS_EMBED_MODEL=<INSPEXIMUS_EMBED_MODEL> -- uvx inspeximus
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from inspeximus <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "inspeximus-agent-memory-with-provenance-gdpr-erasure-and-a-tamper-evident-audit": {
            "command": "uvx",
            "args": [
                "inspeximus"
            ],
            "env": {
                "INSPEXIMUS_PATH": "<INSPEXIMUS_PATH>",
                "INSPEXIMUS_ECHO_GUARD": "<INSPEXIMUS_ECHO_GUARD>",
                "INSPEXIMUS_EMBED_URL": "<INSPEXIMUS_EMBED_URL>",
                "INSPEXIMUS_EMBED_MODEL": "<INSPEXIMUS_EMBED_MODEL>"
            }
        }
    }
}
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from inspeximus <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "inspeximus-agent-memory-with-provenance-gdpr-erasure-and-a-tamper-evident-audit": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "inspeximus"
            ],
            "env": {
                "INSPEXIMUS_PATH": "<INSPEXIMUS_PATH>",
                "INSPEXIMUS_ECHO_GUARD": "<INSPEXIMUS_ECHO_GUARD>",
                "INSPEXIMUS_EMBED_URL": "<INSPEXIMUS_EMBED_URL>",
                "INSPEXIMUS_EMBED_MODEL": "<INSPEXIMUS_EMBED_MODEL>"
            }
        }
    }
}
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from inspeximus <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e INSPEXIMUS_PATH=<INSPEXIMUS_PATH> -e INSPEXIMUS_ECHO_GUARD=<INSPEXIMUS_ECHO_GUARD> -e INSPEXIMUS_EMBED_URL=<INSPEXIMUS_EMBED_URL> -e INSPEXIMUS_EMBED_MODEL=<INSPEXIMUS_EMBED_MODEL> inspeximus-agent-memory-with-provenance-gdpr-erasure-and-a-tamper-evident-audit uvx inspeximus
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from inspeximus <command>

## When to use it
- retire superseded facts without risk of agent regression
- produce verifiable cryptographic certificates for GDPR erasure requests
- track agent decisions in a hash-chained action ledger with RFC 3161 timestamps
- export compliance evidence matching draft-sharif-agent-audit-trail-04 specifications

## Example prompts
- Store the updated staging database address under the staging-db key
- Purge all records for this user and generate the erasure certificate
- Show the action ledger entries along with their RFC 3161 timestamp

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 392262
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33989
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81163
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119231
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47577
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43902

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md