// SCAN REPORT

MCP AI Memory

17 tools. 8 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

8 can modify or destroy data

9 read-only

17 tools total

Community server · catalogue entry verified 11/06/2026

How to control MCP AI Memory ↓

TOOL MAP

Read (9) Write / Execute (5) Destructive / Financial (3)

MOST DANGEROUS TOOLS

Critical Risk

Destructive · High memory_batch_delete This tool permanently removes multiple memory records in bulk without apparent recovery mechanism. Destructive · High memory_delete This tool performs irreversible deletion of memory records. Destructive · Medium memory_unrelate This tool removes/deletes a relationship between two memories. Write · Medium memory_batch This tool creates or modifies data (memories) in a reversible manner.

8 of MCP AI Memory's 17 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL MCP AI MEMORY

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP AI Memory, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "memory_batch_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "memory_batch": {
    "limits": [
      {
        "counter": "memory_batch_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "memory_consolidate": {
    "limits": [
      {
        "counter": "memory_consolidate_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register MCP AI Memory — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP AI MEMORY →

Free to start. No card required.

ALL 17 MCP AI MEMORY TOOLS

DESTRUCTIVE 3 tools

Destructive memory_batch_delete BATCH DELETE BULK REMOVE - Delete multiple memories at once. Keywords: batch delete, bulk remove, mass delete, Destructive memory_delete DELETE REMOVE FORGET ERASE - Delete a specific memory by ID. Keywords: delete, remove, forget, erase, clear, p Destructive memory_unrelate UNRELATE UNLINK DISCONNECT - Remove a relationship between two memories. Keywords: unrelate, unlink, disconnec

WRITE 5 tools

Write memory_batch BATCH BULK MULTIPLE IMPORT - Store multiple memories at once for efficiency. Keywords: batch, bulk, multiple, Write memory_preserve PRESERVE PROTECT KEEP PIN - Preserve a memory from decay, optionally until a specific date. Keywords: preserve Write memory_relate RELATE LINK CONNECT ASSOCIATE - Create a relationship between two memories. Keywords: relate, link, connect, a Write memory_store STORE SAVE REMEMBER CREATE - Store new information, facts, preferences, conversations, or knowledge. Use after Write memory_update UPDATE MODIFY EDIT CHANGE - Update existing memory metadata, tags, confidence, or importance. Keywords: update

READ 9 tools

Read memory_consolidate CONSOLIDATE MERGE CLUSTER DEDUPLICATE - Group and merge similar memories to reduce redundancy. Keywords: conso Read memory_decay_status DECAY STATUS LIFECYCLE STATE - Get decay status and lifecycle information for a memory including state, decay Read memory_get_relations GET RELATIONS SHOW LINKS - Get all relationships for a specific memory. Keywords: get relations, show links, l Read memory_graph_analysis GRAPH ANALYSIS CONNECTIVITY DEGREE - Analyze graph connectivity for a memory including degree metrics and rela Read memory_graph_search GRAPH RELATED CONNECTED NETWORK - Search memories and traverse relationships to find connected information. Ke Read memory_list LIST BROWSE SHOW ALL - List all stored memories chronologically. Use when search returns nothing or to explore Read memory_search SEARCH FIND RECALL RETRIEVE QUERY LOOKUP - Search for stored information using natural language. USE THIS FIRS Read memory_stats STATS STATUS INFO METRICS - Get database statistics, counts, and health metrics. Keywords: stats, status, info Read memory_traverse TRAVERSE EXPLORE GRAPH WALK - Traverse memory graph using BFS/DFS from a starting memory. Includes filtering b

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent delete data through the MCP AI Memory MCP server? +

Yes. The MCP AI Memory server exposes 3 destructive tools including memory_batch_delete, memory_delete, memory_unrelate. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through MCP AI Memory? +

The MCP AI Memory server has 5 write tools including memory_batch, memory_preserve, memory_relate. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach MCP AI Memory.

How many tools does the MCP AI Memory MCP server expose? +

17 tools across 3 categories: Destructive, Read, Write. 9 are read-only. 8 can modify, create, or delete data.

How do I enforce a policy on MCP AI Memory? +

Register the MCP AI Memory MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every MCP AI Memory tool call.

Deterministic rules across all 17 MCP AI Memory tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP AI MEMORY →

Free to start. No card required.

17 MCP AI Memory tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

MCP AI Memory

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL MCP AI MEMORY

// ALL 17 MCP AI MEMORY TOOLS

// RELATED SERVERS

// FAQ