- Language
- JavaScript
- Last commit
- 2h ago
- Forks
- 14
- Open issues
- 1
- Registry update
- Oct 13, 2026
Connect
npm$claude mcp add knolo \ -e KNOLO_MCP_CONFIG=<knolo-mcp-config> \ -- npx -y @knolo/[email protected]
Environment variables
KNOLO_MCP_CONFIGrequiredAbsolute path to knolo-mcp config JSON
Security review
Review passedReviewed 13m ago.
- metadata
- scanned
- packages
- 1 checked
No findings.
Tools
This server runs on your machine, so its tool list is not fetched before install — the README below describes what it offers.
@knolo/mcp
@knolo/mcp is a read-only MCP server for
pinned Knolo V5 Knowledge Images. It exposes the same four tools as
@knolo/openclaw: knolo_search, knolo_get, knolo_verify, and
knolo_status. Pins, policy checks, and query receipts come from
@knolo/tools.
The server speaks stdio only. It does not download images, open a runtime network connection, write or compile knowledge, or expose MCP resources or prompts. Install and pin each image before starting it. A hash, state-root, or policy-root mismatch exits non-zero before the MCP connection starts.
Caller identity is agentId in the config file, default mcp. That id must
be listed in the mount's agents array. Tool arguments cannot set it. The
MCP client's clientInfo.name is stored on the receipt as sessionId and is
not used for authorization. One principal per mount is what policy
evaluation sees.
Every search writes an openclaw-knolo-query-v1 receipt before it returns
hits. An unwritable auditDir returns AUDIT_UNAVAILABLE and no hits.
Restart the process to change pins. There is no hot reload.
@knolo/[email protected] is not published to npm or the MCP Registry yet. The
registry name in server.json is io.github.HiveForensics-AI/knolo.
Config
Paths are absolute. sha256 is 64 lowercase hex characters. stateRoot is
sha256- plus 64 lowercase hex characters.
{
"agentId": "mcp",
"auditDir": "/var/lib/knolo/receipts",
"mounts": [
{
"id": "handbook",
"path": "/opt/knolo/handbook.knolo",
"sha256": "<64 hex>",
"stateRoot": "sha256-<64 hex>",
"policyPath": "/opt/knolo/handbook.policy.json",
"agents": ["mcp"],
"principal": "<policy principal>"
}
]
}
Start it with knolo-mcp --config /absolute/knolo-mcp.json or
KNOLO_MCP_CONFIG. Logs go to stderr. Stdout is JSON-RPC only.
Clients
Claude Desktop, Claude Code, and Cursor:
{
"mcpServers": {
"knolo": {
"command": "npx",
"args": ["-y", "@knolo/mcp", "--config", "/absolute/knolo-mcp.json"]
}
}
}
Claude Code CLI:
claude mcp add knolo -- npx -y @knolo/mcp --config /absolute/knolo-mcp.json
VS Code (.vscode/mcp.json):
{
"servers": {
"knolo": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@knolo/mcp",
"--config",
"${workspaceFolder}/knolo-mcp.json"
]
}
}
}
The package requires Node 20 or newer and @knolo/core ^6.0.0. It does not
implement KAR, coverage, or composition.
From the server's repository — third-party content, read it before running anything it suggests.
More in Memory
KEPTA — the memory for AI systems
io.github.DamianTodorovic
Local encrypted memory for AI: hybrid search, 8 MCP tools, one file you own. Free, no cloud.
memory-poisoning-scanner
io.github.GuardBee
Scans agent code for untrusted input poisoning persistent cross-session memory
Apple Notes
io.github.mgcrea
Search, read and act on Apple Notes — folders, attachments, writes off by default
brains
io.github.spacecowboyian
Personal wiki and memory for AI assistants: store, search, and recall structured notes.
Obsidian Turbocharged
io.github.The-40-Thieves
Governed Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.
Graph-MIND
io.github.goyohan0611-png
Local-first memory for Claude Code, Codex and Claude Desktop, kept verbatim on your own PC.
Listing from the official MCP Registry · repository facts from GitHub, 1h ago.