https://github.com/evolvinglmms-lab/engram
Privacy-first AI memory layer - Signal for AI Memory. E2EE, local-first, works with Claude, Cursor, and any MCP-compatible AI.
https://github.com/evolvinglmms-lab/engram
ai claude cursor e2ee encryption llm local-first mcp memory privacy
Last synced: 4 months ago
JSON representation
Privacy-first AI memory layer - Signal for AI Memory. E2EE, local-first, works with Claude, Cursor, and any MCP-compatible AI.
- Host: GitHub
- URL: https://github.com/evolvinglmms-lab/engram
- Owner: EvolvingLMMs-Lab
- License: other
- Created: 2026-01-29T18:00:25.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2026-02-07T17:25:13.000Z (5 months ago)
- Last Synced: 2026-02-08T01:47:07.616Z (5 months ago)
- Topics: ai, claude, cursor, e2ee, encryption, llm, local-first, mcp, memory, privacy
- Language: TypeScript
- Size: 91.1 MB
- Stars: 11
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
README
Biological memory fades. Digital memory leaks. We fixed both.
Website •
Quick Start •
Features •
Security
---
## What is Engram?
An **end-to-end encrypted** memory layer for AI assistants.
**LOCAL BY DEFAULT** - Your data lives on your device. No cloud, no servers, no sync unless you ask for it.
**ENCRYPTED ALWAYS** - AES-256-GCM. Keys never leave your device. 24-word recovery phrase, like a crypto wallet.
**ZERO-KNOWLEDGE SYNC** - Need multi-device? Opt-in sync encrypts everything client-side. We only see ciphertext. Like Signal, but for AI memory.
**OPEN SOURCE** - Don't trust us. Verify. Audit the code. Self-host if you want. Fork if we disappear.
Works with Claude Desktop, Claude Code, Cursor, and any MCP-compatible client.
## Quick Start
```bash
npx engram-core init
```
Restart your AI client. It remembers you now.
## Features
| Feature | Description |
|---------|-------------|
| **Local by Default** | Your data stays on your device. No cloud required. |
| **E2E Encryption** | AES-256-GCM. Keys never leave your device. |
| **Open Source** | Audit the code. Self-host. Fork if we disappear. |
| **Semantic Memory** | Vector similarity search across all your sessions |
| **Secrets Vault** | Encrypted storage for API keys and credentials |
| **Zero-Knowledge Sync** | Optional. Client-side encryption. We only see ciphertext. |
## Architecture
```
+---------------------------------------------------------------+
| AI CLIENTS |
| |
| +-------------+ +-------------+ +-------------+ |
| | Claude | | Cursor | | Claude | |
| | Desktop | | | | Code | |
| +------+------+ +------+------+ +------+------+ |
| | | | |
| +------------------+------------------+ |
| | |
| v |
| +--------------------+ |
| | MCP Protocol | |
| +---------+----------+ |
| | |
+----------------------------+-----------------------------------+
|
v
+---------------------------------------------------------------+
| ENGRAM SERVER |
| |
| +-------------+ +-------------+ +-------------+ |
| | Memory | | Secrets | | Session | |
| | Store | | Vault | | Watcher | |
| +-------------+ +-------------+ +-------------+ |
| |
+----------------------------+----------------------------------+
|
v
+---------------------+
| SQLite |
| ~/.engram/ |
| |
| Your data stays |
| on YOUR disk |
+---------------------+
```
## Security
All encryption uses `node:crypto` (OpenSSL). No custom cryptography.
| Layer | Algorithm |
|-------|-----------|
| At Rest | AES-256-GCM |
| Key Derivation | PBKDF2-SHA256 (600k iterations) |
| Search Index | HMAC-SHA256 (blind indexing) |
| Recovery | BIP39 Mnemonic (24 words) |
## Why Not Cloud Memory?
| | Engram | Cloud Memory |
|---------------------|:------:|:------------:|
| Where's your data? | Your device (default) | Their servers |
| Who holds the keys? | You | They do |
| Can they read it? | No | Yes |
| Can you verify? | Yes (open source) | No |
| Cross-app | Any MCP client | Locked to one app |
## Philosophy
The AI industry solved intelligence. It forgot about sovereignty.
- Memory is infrastructure, not a feature
- Encryption is a right, not a premium tier
- If you can't export it, you don't own it
## Claude Code Agent Teams Integration
Engram integrates with Claude Code Agent Teams through lifecycle hooks. When teams complete tasks or wind down, Engram can automatically consolidate team memories into structured summaries.
**How it works:**
- Agents save memories tagged with `team:` during work
- Hooks trigger `engram consolidate` at key moments (task completion, teammate idle)
- Consolidation categorizes memories into findings, decisions, hypotheses, blockers, and action items
- Summaries are saved as searchable `team-summary` memories for future sessions
**Configuration** (`.claude/settings.json`):
```json
{
"hooks": {
"TaskCompleted": [
"engram consolidate"
],
"TeammateIdle": [
"engram consolidate"
]
}
}
```
You can also run `engram consolidate` manually to generate team summaries on demand.
---
Your AI should remember you. Not the other way around.