SSame Stateless Agent Memory EngineI gave Claude a mass grave of 200 markdown files and now it remembers my entire project between sessions. No cloud, no API keys, one 10mb Go binary, and private. Stateless Agent Memory Engine is your synapse to the CLI. SAME (Stateless Agent Memory Engine) is persistent memory for AI coding agents. It indexes your markdown notes locally — Obsidian vaults, Logseq graphs, or plain folders — and surfaces relevant context automatically through a 6-gate relevance chain. ~80% of prompts are correctly skipped so your agent isn't drowning in context it doesn't need. 12 MCP tools (9 read, 3 write): semantic search across your knowledge base, filtered search by domain/tag, federated search across multiple vaults, session context with pinned notes and handoffs, save decisions, create handoffs for the next session. SQLite + Ollama embeddings on localhost. Falls back to keyword search without Ollama. No outbound network calls, no telemetry, no accounts. Your notes never leave your machine. Works with Claude Code (hooks + MCP), Cursor, Windsurf, and any MCP client via stdio transport.
mcp-so:same---stateless-agent-memory-engine_sgx-labs
View sourceFirst Seen
Feb 18, 2026
Last Scanned
Feb 18, 2026
Findings
2
Score
92/100
Findings (2)
Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation
"-y" Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.
Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.
Detects MCP server configs using npx to run packages without version pinning
"command": "npx" Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.
Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.