Verified Memory MCP

{
  "version": "0.4.1",
  "transport": "stdio",
  "identifier": "@python1/verified-memory-mcp",
  "runtimeHint": "npx",
  "registryType": "npm",
  "registryBaseUrl": "https://registry.npmjs.org",
  "packageArguments": [
    {
      "name": "--pack",
      "type": "named",
      "format": "filepath",
      "valueHint": "pack_dir",
      "isRequired": true,
      "description": "Absolute path to a pack directory containing exactly MEMORY.md, README.md, records.jsonl and SHA256SUMS, plus an optional PACK.json (creation and expiry dates) and SHA256SUMS.sig. The whole pack is verified at startup; the server refuses to start if any check fails."
    },
    {
      "name": "--trusted-keys",
      "type": "named",
      "format": "filepath",
      "valueHint": "trusted_keys_file",
      "description": "Absolute path to a file of public keys you trust to sign packs, one per line: name ssh-ed25519 AAAA… [comment]. A pack signed by a listed key reports that signer; a valid signature by any other key is reported as untrusted."
    },
    {
      "name": "--trusted-fingerprint",
      "type": "named",
      "format": "string",
      "valueHint": "fingerprint",
      "isRepeated": true,
      "description": "Recommended for signed packs. The SHA256:… fingerprint of a key allowed to sign packs, as ssh-keygen -l prints it; repeat the flag (or separate with commas) for several. If set, only a pack signed by one of these keys is accepted, whatever --trusted-keys says. Implies --require-signature."
    },
    {
      "name": "--revoked-keys",
      "type": "named",
      "format": "filepath",
      "valueHint": "revoked_keys_file",
      "description": "Absolute path to a file of revoked key fingerprints, one SHA256:… per line. A pack signed by a revoked key is always refused, even if pinned or trusted."
    },
    {
      "name": "--min-sequence",
      "type": "named",
      "format": "number",
      "valueHint": "N",
      "description": "Refuse any pack whose signed PACK.json sequence is missing or lower than N, so an older validly signed pack cannot replace a newer one. Implies --require-signature. No state is kept: raise N yourself when you install a newer pack."
    },
    {
      "name": "--require-signature",
      "type": "named",
      "format": "boolean",
      "default": "false",
      "description": "Set to true to refuse to start unless the pack is signed by a pinned (--trusted-fingerprint) or trusted (--trusted-keys) key. Freshness is reported but not enforced. When false or omitted, unsigned packs load and are reported as unsigned."
    },
    {
      "name": "--strict",
      "type": "named",
      "format": "boolean",
      "default": "false",
      "description": "Set to true to refuse to start (and to stop serving) unless the pack is signed by a pinned (--trusted-fingerprint) or trusted (--trusted-keys) key and is fresh: PACK.json present and not expired. Implies --require-signature. When false or omitted, undated and stale packs load and every result reports their status."
    }
  ]
}