{ "data": { "a": { "slug": "basic-memory", "name": "Basic Memory", "vendor": "Basic Memory LLC", "vendorUrl": "https://basicmemory.com", "kind": "mcp", "category": "agent-memory", "summary": "Basic Memory is an open-source MCP server and CLI that keeps an AI assistant's memory as Markdown notes on the user's disk, with full-text, semantic and graph search, plus an optional paid cloud for shared team memory.", "url": "https://www.anchorterminal.com/tools/basic-memory", "markdownUrl": "https://www.anchorterminal.com/tools/basic-memory.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/basic-memory.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/basic-memory.json", "dns": "basic-memory.grade.anchorterminal.com", "repo": "https://github.com/basicmachines-co/basic-memory", "license": "AGPL-3.0", "transports": [ "stdio" ], "packages": [ { "registry": "pypi", "name": "basic-memory" } ], "auth": "none", "authNotes": "The local stdio server needs no credential and works inside configured project folders. Basic Memory Cloud uses OAuth 2.1 through WorkOS, with API keys that are read-only or project-scoped on Pro and above.", "pricing": "freemium", "pricingNotes": "The open-source server is free. Cloud is $19 a month for up to 2 members with 1,900 credits and a 7-day trial, Pro $99 a month for 5 members, Business $249 a month for 25. Usage credits are $0.01 each.", "priceSummary": "$19 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, docs, llms.txt or pricing (checked 2026-11-06). Cloud subscriptions are paid through Polar.sh per the terms.", "endpoints": [] }, "toolCount": 13, "popularity": { "githubStars": 4509, "npmWeekly": null, "pypiWeekly": 19662, "asOf": "2026-11-06" }, "docsUrl": "https://docs.basicmemory.com", "llmsTxt": "https://docs.basicmemory.com/llms.txt", "registryName": "io.github.basicmachines-co/basic-memory", "capabilities": [ "memory.store", "memory.search", "memory.graph", "memory.delete" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "agpl-3.0", "python", "mcp", "mcp-registry", "markdown", "llms-txt", "telemetry", "oauth" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 76.9, "grade": "BB", "agentReady": true, "rank": 38, "ranked": true, "rankOf": 1486, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 91, "payments": 50, "reliability": 83, "schema": 89, "security": 61, "transparency": 82 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Basic Memory 1.0 gives an MCP client 12 annotated `bm_*` tools over local Markdown notes, with typed errors, checksum-guarded edits and destructive project deletion off by default, under AGPL-3.0. Version 1.0 of 29 October 2026 removed every pre-1.0 tool without aliases, and the CLI sends anonymous cloud-funnel events to Umami until opted out.", "bestFor": "Memory for coding agents and assistants kept as Markdown the user owns, with search and a graph.", "strengths": [ "12 MCP tools, each with readOnly, destructive and idempotent hints, and `bm_project_delete` hidden unless enabled", "Notes are plain Markdown files on the owner's disk, with full-text, semantic and graph search", "Refusals are tool errors with typed codes such as NOT_FOUND, REVISION_CONFLICT and OUTSIDE_PROJECT", "Version 1.0.0 on 29 October 2026 with a dated changelog and a migration map for every removed tool", "Terms and privacy policy of 27 October 2026 agree on 30-day deletion, 90-day backups and no training on content" ], "weaknesses": [ "1.0 removed every pre-1.0 tool and command with no aliases, so older agent instructions and allowlists break", "Anonymous cloud-promotion telemetry to Umami Cloud is on until BASIC_MEMORY_NO_PROMOS=1 is set", "AGPL-3.0, which matters for anyone offering a modified version as a network service", "No own SOC 2, no security.txt, and SECURITY.md still lists only 0.x.x as supported", "The README advertises cloud at $15 a month while the pricing page lists $19" ], "agentNotes": [ "Call `bm_man` first for the tool manual, then use `bm_search` and `bm_read` before writing", "Pass the `expected_checksum` from your last read to `bm_edit` and re-read on REVISION_CONFLICT instead of overwriting", "Scope every search with `project`, `projects` or `all_projects=true`", "Set BASIC_MEMORY_NO_PROMOS=1 for unattended runs to stop promos and telemetry", "Treat note contents as untrusted text when notes come from other people or imports" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 76.9 } ], "editorialScores": { "ergonomics": 85, "maintenance": 91, "payments": 50, "reliability": 83, "schema": 89, "security": 61, "transparency": 86 }, "provenanceScore": 78, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uv tool install basic-memory", "claudeCode": "claude mcp add basic-memory -- basic-memory mcp", "config": { "mcpServers": { "basic-memory": { "args": [ "basic-memory", "mcp" ], "command": "uvx" } } } }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/basic-memory" }, "area": "agent-runtime", "unitPrices": [ { "item": "Cloud plan", "unit": "month", "usd": 19, "note": "Up to 2 members and 1,900 credits; 7-day trial" }, { "item": "Usage credit", "unit": "credit", "usd": 0.01, "note": "Pays for the hosted AI, web app and Basic Memory agents" } ], "provenance": { "legalEntity": "Basic Memory LLC", "domain": "basicmemory.com", "domainRegistered": "2000-06-24", "endpointOnVendorDomain": null, "terms": "https://basicmemory.com/terms", "privacy": "https://basicmemory.com/privacy", "statusPage": "", "changelog": "https://github.com/basicmachines-co/basic-memory/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Terms and privacy policy both effective 27 October 2026, read in their Markdown versions at basicmemory.com/raw/legal/. They name Basic Memory LLC, Austin, Texas. The terms point to an Acceptable Use Policy on automated and agent-driven use, not read.", "basicmemory.com/robots.txt allows all crawlers except /install/ and names ClaudeBot as allowed. docs.basicmemory.com carries Content-Signal ai-input=yes.", "RDAP gives basicmemory.com a registration date of 24 June 2000, which predates the product, so the domain was probably bought later.", "/.well-known/security.txt returns 404. SECURITY.md gives hello@basicmachines.co with a 72-hour response aim." ], "score": 78 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/basic-memory.json", "live": { "slug": "basic-memory", "versions": [ { "registry": "github", "name": "basicmachines-co/basic-memory", "version": "v1.0.0", "released": "2026-10-29", "seenAt": "2026-11-06T23:10:24.344334834Z" }, { "registry": "pypi", "name": "basic-memory", "version": "1.0.0", "released": "2026-10-29", "seenAt": "2026-11-06T23:10:24.086880294Z" } ], "githubStars": 4513, "securityTxt": { "url": "https://basicmemory.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:33.039496203Z" }, "llmsTxt": { "url": "https://docs.basicmemory.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:42.053120181Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/basicmachines-co/basic-memory/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:20:09.92162468Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f0d13083be72" }, { "url": "https://basicmemory.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T13:59:59.298399437Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "653d0ae981d7" }, { "url": "https://basicmemory.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:00:03.097753192Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bb02aea11329" } ], "updatedAt": "2026-11-07T15:59:33.039496203Z" } }, "answer": "Basic Memory scores 76.9 (BB) on agent readiness against Graphicle's 70.6 (BB), and leads in 4 of 7 scored categories. Graphicle leads on security \u0026 auth and payments \u0026 pricing.", "b": { "slug": "graphicle", "name": "Graphicle", "vendor": "KarLex AI, Inc.", "vendorUrl": "https://www.karlex.ai/graphicle", "kind": "mcp", "category": "agent-memory", "summary": "Graphicle is an open-source Rust program that builds a code graph of a repository and keeps its documents, reviewed decisions and past coding-agent sessions, served to Claude Code, Codex, Cursor and other MCP clients as cited excerpts.", "url": "https://www.anchorterminal.com/tools/graphicle", "markdownUrl": "https://www.anchorterminal.com/tools/graphicle.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/graphicle.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/graphicle.json", "dns": "graphicle.grade.anchorterminal.com", "repo": "https://github.com/Graphicle-AI/graphicle", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "packages": [], "auth": "mixed", "authNotes": "No account. The stdio server (`graphicle mcp`) runs with the owner key saved in the local data folder, which reads every project in the store. Over HTTP (`graphicle serve`, 127.0.0.1:8854 by default) each agent or person gets its own access key with a role, optional expiry and optional project list, sent as `Authorization: Bearer` or `X-Workspace-Capability`, never in the URL. Keys are stored as hashes and can be revoked.", "pricing": "free", "pricingNotes": "Free under Apache-2.0 for individuals and teams, with nothing to buy. A commercial edition for teams is in private preview with no published prices. Optional model calls (answers, memory extraction, full document extraction) are paid to the provider the owner configures, or run locally through Ollama.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, README, docs or karlex.ai (checked 2026-10-15). The software has no paid tier.", "endpoints": [] }, "toolCount": 25, "popularity": { "githubStars": 144, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-15" }, "docsUrl": "https://github.com/Graphicle-AI/graphicle/blob/main/docs/quickstart.md", "registryName": "io.github.Graphicle-AI/graphicle", "capabilities": [ "memory.search", "memory.graph", "memory.store", "memory.delete" ], "tags": [ "open-source", "local", "self-hosted", "free", "no-card", "apache-2.0", "rust", "mcp", "macos", "linux" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 70.6, "grade": "BB", "agentReady": true, "rank": 192, "ranked": true, "rankOf": 1486, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 83, "payments": 60, "reliability": 63, "schema": 83, "security": 67, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -2, "negativeNotes": [ "2026-10-25. 0.1.7's changelog, under `### Security`, describes two fixed flaws in released versions up to 0.1.6. `graphicle graph install` wrote through a symbolic link at a skill's `SKILL.md` or version stamp (\"before, that file was overwritten\"), and a symbolic link a repository commits at `.graphicle/.rebuild.lock`, the rebuild's temporary graph or `.gitattributes` let `graphicle graph update`, a hook rebuild or `graphicle graph hook install` \"truncate, overwrite or add a line to the file it names\". So a hostile repository could make the program write to a file outside it. Fixed in 0.1.7 and described in the changelog, which names no advisory, though SECURITY.md routes reports through GitHub advisories. GitHub's advisory page answered 403 on 1 November, so an advisory there is unchecked. Judgement call. -2, the changelog-only fix term claude-code and claude-agent-sdk take for their symlink and sandbox fixes and stackone took for a described flaw with no advisory, below terraform-mcp's -3 for a cross-tenant flaw, since this needs the user to sync a hostile repository and exposes no credential. https://github.com/Graphicle-AI/graphicle/blob/v0.1.7/CHANGELOG.md" ], "verdict": "One local program gives a coding agent a code graph and project memory through typed, annotated MCP tools that return cited excerpts within a token budget, with agent-written memories held for human approval. It reached 0.1.10 in sixteen days, its SDKs aren't on any registry, and 0.1.7 fixed symlink file overwrites disclosed only in its changelog.", "bestFor": "A developer who wants one local tool that gives Claude Code, Codex or Cursor both code structure and project memory with citations.", "strengths": [ "25 MCP tools with closed JSON Schema inputs, enums and limits, readOnlyHint on every read tool, and a five-tool essentials set", "Recall returns excerpts with file, line range and hash, within a `max_tokens` budget, and `skip_shown` avoids resending excerpts", "Agent-proposed memories need verbatim quotes and a person's approval, and the MCP server has no tool that deletes or runs commands", "No telemetry or account. The source calls out only to models, connectors and GitHub that the owner configures", "Eleven releases from 14 to 30 October 2026, each in the official MCP registry under a verified namespace since 0.1.2" ], "weaknesses": [ "Version 0.1.10, about two weeks old, with stored-data changes shipped in patch releases", "0.1.7 fixed symlink-following file overwrites from a hostile repository, disclosed only in the changelog", "The stdio server runs with the owner key, so its graph tools can read any project in the store unless an HTTP key is scoped", "SDKs are source-only, no llms.txt, and the Windows build is an unsigned preview", "The cargo-deny licence and advisory job failed on main on 15 October, and later runs couldn't be read" ], "agentNotes": [ "Call `recall_project` with a `max_tokens` budget, then `read_project_source` with the cited id and byte offset to continue a cut excerpt", "Use `query_graph`, `get_neighbors` and `shortest_path` for structure questions, and pass `repo` to reach another synced project", "Treat proposed memories as drafts. They are not served until a person approves them in `graphicle open` under Memory", "Ask the user before running `graphicle setup`, which edits agent settings, AGENTS.md and Git hooks, and use `graphicle disconnect` to undo it", "Run `graphicle sync` once after each upgrade, as the changelog's After upgrading sections say, or answers read a stale graph" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.6 } ], "editorialScores": { "ergonomics": 85, "maintenance": 83, "payments": 60, "reliability": 63, "schema": 83, "security": 67, "transparency": 71 }, "provenanceScore": 70, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "brew install graphicle-ai/tap/graphicle \u0026\u0026 cd your-repo \u0026\u0026 graphicle setup", "claudeCode": "graphicle sync . \u0026\u0026 graphicle connect claude-code", "config": { "mcpServers": { "graphicle": { "args": [ "mcp", "--project", "PROJECT_ID" ], "command": "/full/path/to/graphicle" } } } }, "letme": { "capability": "https://letme.dev/memory.search", "tool": "https://letme.dev/graphicle" }, "area": "agent-runtime", "provenance": { "legalEntity": "KarLex AI, Inc.", "domain": "karlex.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://www.karlex.ai/legal/terms", "privacy": "https://www.karlex.ai/legal/privacy", "statusPage": "", "changelog": "https://github.com/Graphicle-AI/graphicle/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-01", "notes": [ "The README and LICENSE read Copyright 2026 KarLex AI, Inc. karlex.ai names KarLex AI as the company behind Graphicle and links the graphicle-ai GitHub organisation, created on 29 September 2026.", "The terms of use and privacy policy at karlex.ai are dated 14 March 2025 and cover the website and its accounts, not the Graphicle software, which runs on the user's machine.", "karlex.ai/.well-known/security.txt names security@karlexai.com and expires on 7 April 2027 (read 15 October and 1 November 2026). karlexai.com redirects to karlex.ai; RDAP at Verisign gives karlexai.com a registration date of 20 December 2023. The .ai registration date was not read.", "karlex.ai's robots.txt allows all crawlers.", "The software runs on the owner's machine, so there is no vendor endpoint or status page to check." ], "score": 70 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/graphicle.json", "live": { "slug": "graphicle", "versions": [ { "registry": "github", "name": "Graphicle-AI/graphicle", "version": "v0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:30:59.219907862Z" }, { "registry": "mcp-registry", "name": "io.github.Graphicle-AI/graphicle", "version": "0.1.13", "seenAt": "2026-11-06T17:53:32.937482841Z" } ], "githubStars": 512, "securityTxt": { "url": "https://karlex.ai/.well-known/security.txt", "state": "valid", "expires": "2027-04-07T00:00:00.000Z", "checkedAt": "2026-11-07T15:59:37.856277688Z" }, "domain": { "domain": "karlex.ai", "registered": "2024-12-13", "source": "https://rdap.identitydigital.services/rdap/domain/karlex.ai", "checkedAt": "2026-11-01T14:21:47.881801594Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/Graphicle-AI/graphicle/main/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:18:25.28570247Z", "changedAt": "2026-11-06T13:39:53.714700493Z", "fingerprint": "7a259e868f65" }, { "url": "https://www.karlex.ai/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:30:24.94817621Z", "changedAt": "2026-11-03T08:07:25.33015972Z", "fingerprint": "5b2acb85b3e1" }, { "url": "https://www.karlex.ai/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:30:27.273112741Z", "changedAt": "2026-11-03T08:07:27.759298262Z", "fingerprint": "ed3a9743533c" } ], "github": { "repo": "graphicle-ai/graphicle", "checkedAt": "2026-11-02T08:52:52.558134257Z", "stars": 492, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T08:20:42Z", "openIssues": 4, "openPRs": 0, "issuesOpened90d": 7, "issuesClosed90d": 3, "prsMerged90d": 10, "ci": { "branch": "main", "runs": 32, "success": 19, "failure": 11, "other": 2, "latest": "failure", "latestAt": "2026-11-02T08:49:37Z" }, "replies": { "sampled": 5, "unanswered": 0, "medianDays": 0.2 } }, "updatedAt": "2026-11-07T15:59:37.856277688Z" } }, "edges": [ { "by": 20, "category": "reliability", "leads": "basic-memory", "name": "Reliability", "reasons": { "a": "Local-software lines, as a stdio MCP server the owner runs. `basic-memory` on PyPI with Python 3.12 or newer stated, installed with uv (20). Test, SQLite lifecycle and Docker workflows run on the repository, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 74 open issues and pull requests against 200 commits in the 90 days, with recent bug reports answered by a maintainer within days and one flaky-CI issue open (18 of 25). The changelog calls out breaking changes in their own sections (15). v1.0.0 on 29 October 2026 (15). Total 83.", "b": "Read as local software. Installs from an official Homebrew tap, an install script that checks each archive's SHA-256, or release archives, with macOS and Linux (glibc) on arm64 and x86_64 stated, and since 0.1.5 a Windows preview build that isn't code-signed. No language package registry (20). A public CI workflow formats, lints and tests each of the three crates on macOS and Linux. On 15 October every test job passed on both pushes to main and the cargo-deny job for licences, advisories and sources failed; 0.1.7 (25 October) replaced a yanked crate that cargo-deny warned about, but GitHub's Actions pages weren't readable on 1 November, so the runs are per the 15 October check (18). Outside reports and fixes have been handled in releases (issue #8 on kubernetes speed, pull requests #9 and #10 in 0.1.6 and 0.1.7), but the open issue list couldn't be read on 1 November, so the record is still too thin to judge (15). A dated changelog with eleven releases, each with an \"After upgrading\" section that names the steps a release needs (re-sync, memories that go stale), but large additions and stored-data changes ship in 0.1.x patch bumps (10). Version 0.1.10, not declared stable (0). 20+18+15+10+0 = 63." }, "scores": { "a": 83, "b": 63 } }, { "by": 11, "category": "transparency", "leads": "basic-memory", "name": "Transparency \u0026 trust", "reasons": { "a": "AGPL-3.0, an OSI licence (30). The terms and privacy policy of 27 October 2026 agree on 30-day retention after cancellation, backups up to 90 days and no training on or sale of content, and name the infrastructure providers (26 of 30). The 1.0 release ships a migration guide mapping every removed tool and command, without a written deprecation period (14 of 20). Telemetry is disclosed in the README with what is and isn't sent and one opt-out, but it is on by default (16 of 20). Total 86.", "b": "Apache-2.0 with NOTICE files that credit Graphify and every adapted project (30). The README privacy section and the FAQ list every case in which the program uses the network, say there is no telemetry or account, and keep data in one SQLite store with deletion receipts. A grep of the source for outbound hosts found only model providers, connectors and GitHub, which agrees. The karlex.ai privacy policy of 14 March 2025 covers the website, not the software (20 of 30). SECURITY.md lists supported versions. No deprecation policy (3 of 20). No telemetry to opt out of, and the network cases are disclosed, with `freshness off` and `--code-only` to limit them (18 of 20). 30+20+3+18 = 71." }, "scores": { "a": 82, "b": 71 } }, { "by": 10, "category": "payments", "leads": "graphicle", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, with the price lines read for the cloud. No x402, MPP or L402 (0 of 40). Cloud plans are public, and credits are $0.01 each, but what a credit buys isn't priced per unit (10). The open-source server is free with no card (20). An agent can install it from PyPI and run it with no account (20). Total 50.", "b": "No payment protocol (0). Read with the self-hosted rule. Free under Apache-2.0 with nothing to buy (20). No card or account (20). An agent can install it and run `graphicle setup --yes` with no signup, as the README suggests (20). The commercial team edition is still in private preview with no prices on karlex.ai on 1 November, so there is no paid option to score. 0+20+20+20 = 60." }, "scores": { "a": 50, "b": 60 } }, { "by": 8, "category": "maintenance", "leads": "basic-memory", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.0.0 on 29 October 2026 (30). v0.24.0 and v0.24.1 on 22 October and v1.0.0, three releases in 90 days (20). Recent issues from outside users got maintainer replies within a few days (20 of 25). Verified namespace io.github.basicmachines-co/basic-memory in the official MCP registry, published by a workflow (15). uv.lock and CI, with an open report of an unmaintained dependency (6 of 10). Total 91.", "b": "v0.1.10 on 30 October 2026 (30). Eleven releases, v0.1.0 (14 October) to v0.1.10 (30 October), all inside the last 90 days (20). Outside pull requests #9 and #10 shipped in 0.1.6 and 0.1.7 and issue #8's kubernetes timings drove 0.1.5, per the changelog, with Discussions and a Discord linked, but reply times and open issues weren't readable on 1 November (12 of 25). In the official MCP registry as io.github.Graphicle-AI/graphicle, a GitHub-verified namespace, with 0.1.10 published on 30 October and marked latest (15). The SDKs are still not on PyPI or npm. Pinned GitHub Actions, dependency-graph updates and passing tests, but the licence and advisory job failed on main on 15 October and its later runs weren't readable (6 of 10). 30+20+12+15+6 = 83." }, "scores": { "a": 91, "b": 83 } }, { "by": 6, "category": "schema", "leads": "basic-memory", "name": "Schema \u0026 documentation", "reasons": { "a": "Typed JSON Schema inputs on every tool from Pydantic annotations (25). llms.txt on the site and the docs, with Markdown versions of pages (10). Descriptions say what each tool does and point to the next tool, such as `bm_search` ending with \"Read full notes with bm_read\", and `bm_man` serves the manual, with less on when not to use a tool (16 of 20). Closed values for search mode, edit command and schema command, with aliases accepted for common argument names (13 of 15). Typed refusal codes are documented in the changelog and docs, with fewer worked examples per tool (11 of 15). Dated changelog and MCP registry versions, plus an unreleased breaking change after 1.0 (14 of 15). Total 89.", "b": "Every MCP tool has a JSON Schema input with `additionalProperties: false` and required fields marked, read from the tool list fixtures in the repository at v0.1.10 (25). No llms.txt. The docs are Markdown files in the repository that an agent can read raw (5 of 10). Server instructions say which tool to use for structure and which for what the project says, `recall_project` says when to leave the reranker off, and memory tools explain draft review, while graph tools such as `query_graph` carry one-line descriptions (14 of 20). Enums on `mode`, `pack_order`, memory `kind` and `state`, length and item limits, minimum values and closed nested objects (14 of 15). Examples throughout the docs. The OpenAPI file documents 400, 403, 409 and 429 for the HTTP API and limit errors name the setting to change, but MCP error results are not catalogued (10 of 15). A dated changelog, semver crate versions and `/v1` paths (15). 25+5+14+14+10+15 = 83." }, "scores": { "a": 89, "b": 83 } }, { "by": 6, "category": "security", "leads": "graphicle", "name": "Security \u0026 auth", "reasons": { "a": "Local stdio server with no credential, and cloud OAuth 2.1 through WorkOS with read-only or project-scoped keys on Pro (22 of 30). Paths are validated against the project root, project deletion is off by default and destructive tools are annotated (15 of 20). SECURITY.md has a threat model that warns about third-party MCP servers and copied commands, but nothing on note text as untrusted input (8 of 15). A local log file, and cloud audit logs only on Business (8 of 15). SECURITY.md gives an email and a 72-hour response aim but lists only 0.x.x as supported; no security.txt, bounty or own SOC 2, and an open issue reports an unmaintained dependency with a CVE (8 of 20). Total 61.", "b": "Read with the API checklist for a server the owner runs, as for Cognee and Graphiti. Over HTTP each person or agent gets its own key with a role, optional expiry and optional project list, stored as a hash, revocable, and sent in a header with the docs saying never in the URL. The stdio server runs with the owner key, which can read every project, and its graph tools take `repo` to reach other projects (24 of 30). The MCP server has no delete or command tool, agent writes are drafts that a person approves, and `--tools` and per-key project revocation narrow access. No approval step is needed because nothing destructive is exposed (18 of 20). Recall returns documents, connector content and captured sessions, which can carry injected text. Server instructions say memory is evidence, not tool permission, drafts need verbatim quotes, and capture redacts credentials and drops `\u003cprivate\u003e` spans. No general prompt-injection guidance found (9 of 15). Workspace usage counters, `workflow_status` and hash-chained deletion receipts, while the team audit trail belongs to the commercial edition (6 of 15). SECURITY.md with private reporting through GitHub advisories, a security.txt at karlex.ai valid to 7 April 2027 (re-read on 1 November), a cargo-deny advisory check in CI that failed on 15 October, and `### Security` sections in the 0.1.6 and 0.1.7 changelog entries. No bug bounty or certification, and the changelog names no advisory for the 0.1.7 fixes (10 of 20). 24+18+9+6+10 = 67." }, "scores": { "a": 61, "b": 67 } } ], "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Basic Memory LLC", "b": "KarLex AI, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "stdio, Streamable HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "AGPL-3.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "13", "b": "25", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "io.github.basicmachines-co/basic-memory", "b": "io.github.Graphicle-AI/graphicle", "name": "MCP registry" }, { "a": "2026-10-29", "b": "2026-10-30", "name": "Last release" }, { "a": "2026-10-27", "b": "2025-03-14", "name": "Terms last updated" }, { "a": "2026-10-27", "b": "2025-03-14", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "4.5k stars, 20k PyPI/wk", "b": "144 stars", "name": "Popularity" }, { "a": "none", "b": "3.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Basic Memory scores 76.9 (BB) on agent readiness against Graphicle's 70.6 (BB), and leads in 4 of 7 scored categories. Graphicle leads on security \u0026 auth and payments \u0026 pricing.", "question": "Which is better for AI agents, Basic Memory or Graphicle?" }, { "answer": "Basic Memory needs no key. Graphicle takes an API key or an OAuth sign-in.", "question": "Do Basic Memory and Graphicle need an API key?" }, { "answer": "Basic Memory runs on your own machine, with no hosted endpoint listed. Graphicle runs on your own machine, with no hosted endpoint listed.", "question": "Can an agent call Basic Memory and Graphicle without installing anything?" }, { "answer": "Yes. Basic Memory is open source (AGPL-3.0). Graphicle is open source (Apache-2.0).", "question": "Are Basic Memory and Graphicle open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 83 against 63", "Schema \u0026 documentation, 89 against 83", "Maintenance \u0026 community, 91 against 83", "Transparency \u0026 trust, 82 against 71" ], "also": [ "No key needed to call it" ], "goodFor": "Memory for coding agents and assistants kept as Markdown the user owns, with search and a graph.", "slug": "basic-memory", "watchFor": "1.0 removed every pre-1.0 tool and command with no aliases, so older agent instructions and allowlists break" }, { "aheadOn": [ "Security \u0026 auth, 67 against 61", "Payments \u0026 pricing, 60 against 50" ], "also": [ "Free to start without a card" ], "goodFor": "A developer who wants one local tool that gives Claude Code, Codex or Cursor both code structure and project memory with citations.", "slug": "graphicle", "watchFor": "Version 0.1.10, about two weeks old, with stored-data changes shipped in patch releases" } ], "history": { "basic-memory": null, "graphicle": [ { "causes": [ "product", "correction", "event" ], "date": "2026-11-01", "delta": 0.5, "from": 70.1, "fromGrade": "BB", "to": 70.6, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.3, "from": 69.8, "fromGrade": "B", "to": 70.1, "toGrade": "BB" } ] }, "job": { "capability": "memory.store", "name": "Agent memory" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-basic-memory.json", "title": "Amazon Bedrock AgentCore Memory vs Basic Memory", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-basic-memory" }, { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-graphicle.json", "title": "Amazon Bedrock AgentCore Memory vs Graphicle", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-claude-mem.json", "title": "Basic Memory vs claude-mem", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-claude-mem" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-cognee.json", "title": "Basic Memory vs Cognee", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-cognee" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-everos.json", "title": "Basic Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-google-memory-bank.json", "title": "Basic Memory vs Agent Platform Memory Bank", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-google-memory-bank" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-graphiti.json", "title": "Basic Memory vs Graphiti", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-graphiti" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-hindsight.json", "title": "Basic Memory vs Hindsight", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-hindsight" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-honcho.json", "title": "Basic Memory vs Honcho", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-honcho" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-hy-memory.json", "title": "Basic Memory vs Hy Memory", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-hy-memory" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-langmem.json", "title": "Basic Memory vs LangMem", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-langmem" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-localghost.json", "title": "Basic Memory vs LocalGhost", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-localghost" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-mem0.json", "title": "Basic Memory vs Mem0 Platform + MCP", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-mem0" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-memmachine.json", "title": "Basic Memory vs MemMachine", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-memori.json", "title": "Basic Memory vs Memori", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-memori" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-memory-reference-server.json", "title": "Basic Memory vs Memory (MCP reference server)", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-memory-reference-server" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-mempalace.json", "title": "Basic Memory vs MemPalace", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-mempalace" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-past-dev.json", "title": "Basic Memory vs past.dev", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-supermemory.json", "title": "Basic Memory vs Supermemory API + MCP", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-supermemory" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-tencentdb-agent-memory.json", "title": "Basic Memory vs TencentDB Agent Memory", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-tencentdb-agent-memory" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip.json", "title": "Basic Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-zep.json", "title": "Basic Memory vs Zep", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-graphicle.json", "title": "claude-mem vs Graphicle", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-graphicle.json", "title": "Cognee vs Graphicle", "url": "https://www.anchorterminal.com/compare/cognee-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-graphicle.json", "title": "EverOS vs Graphicle", "url": "https://www.anchorterminal.com/compare/everos-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/google-memory-bank-vs-graphicle.json", "title": "Agent Platform Memory Bank vs Graphicle", "url": "https://www.anchorterminal.com/compare/google-memory-bank-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-basic-memory.json", "title": "AI Memory vs Basic Memory", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-basic-memory" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-graphicle.json", "title": "AI Memory vs Graphicle", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-context-mode.json", "title": "Basic Memory vs Context Mode Engine", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-context-mode" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-graphicle.json", "title": "Context Mode Engine vs Graphicle", "url": "https://www.anchorterminal.com/compare/context-mode-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-graphiti.json", "title": "Graphicle vs Graphiti", "url": "https://www.anchorterminal.com/compare/graphicle-vs-graphiti" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-hindsight.json", "title": "Graphicle vs Hindsight", "url": "https://www.anchorterminal.com/compare/graphicle-vs-hindsight" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-honcho.json", "title": "Graphicle vs Honcho", "url": "https://www.anchorterminal.com/compare/graphicle-vs-honcho" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-hy-memory.json", "title": "Graphicle vs Hy Memory", "url": "https://www.anchorterminal.com/compare/graphicle-vs-hy-memory" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-khoj.json", "title": "Graphicle vs Khoj", "url": "https://www.anchorterminal.com/compare/graphicle-vs-khoj" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-langmem.json", "title": "Graphicle vs LangMem", "url": "https://www.anchorterminal.com/compare/graphicle-vs-langmem" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-mem0.json", "title": "Graphicle vs Mem0 Platform + MCP", "url": "https://www.anchorterminal.com/compare/graphicle-vs-mem0" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-memmachine.json", "title": "Graphicle vs MemMachine", "url": "https://www.anchorterminal.com/compare/graphicle-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-memori.json", "title": "Graphicle vs Memori", "url": "https://www.anchorterminal.com/compare/graphicle-vs-memori" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-mempalace.json", "title": "Graphicle vs MemPalace", "url": "https://www.anchorterminal.com/compare/graphicle-vs-mempalace" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-past-dev.json", "title": "Graphicle vs past.dev", "url": "https://www.anchorterminal.com/compare/graphicle-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-supermemory.json", "title": "Graphicle vs Supermemory API + MCP", "url": "https://www.anchorterminal.com/compare/graphicle-vs-supermemory" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-tencentdb-agent-memory.json", "title": "Graphicle vs TencentDB Agent Memory", "url": "https://www.anchorterminal.com/compare/graphicle-vs-tencentdb-agent-memory" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-tokenrip.json", "title": "Graphicle vs Tokenrip", "url": "https://www.anchorterminal.com/compare/graphicle-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-zep.json", "title": "Graphicle vs Zep", "url": "https://www.anchorterminal.com/compare/graphicle-vs-zep" } ], "panel": null, "scores": [ { "basic-memory": 83, "by": 20, "edge": "basic-memory", "graphicle": 63, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "basic-memory": 89, "by": 6, "edge": "basic-memory", "graphicle": 83, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "basic-memory": 85, "by": 0, "edge": "", "graphicle": 85, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "basic-memory": 61, "by": 6, "edge": "graphicle", "graphicle": 67, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "basic-memory": 50, "by": 10, "edge": "graphicle", "graphicle": 60, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "basic-memory": 91, "by": 8, "edge": "basic-memory", "graphicle": 83, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "basic-memory": 82, "by": 11, "edge": "basic-memory", "graphicle": 71, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Basic Memory scores 76.9 (BB) on agent readiness against Graphicle's 70.6 (BB), and leads in 4 of 7 scored categories. Graphicle leads on security \u0026 auth and payments \u0026 pricing. Both do agent memory.", "tasks": null, "tutorials": [], "verdicts": { "basic-memory": "Basic Memory 1.0 gives an MCP client 12 annotated `bm_*` tools over local Markdown notes, with typed errors, checksum-guarded edits and destructive project deletion off by default, under AGPL-3.0. Version 1.0 of 29 October 2026 removed every pre-1.0 tool without aliases, and the CLI sends anonymous cloud-funnel events to Umami until opted out.", "graphicle": "One local program gives a coding agent a code graph and project memory through typed, annotated MCP tools that return cited excerpts within a token budget, with agent-written memories held for human approval. It reached 0.1.10 in sixteen days, its SDKs aren't on any registry, and 0.1.7 fixed symlink file overwrites disclosed only in its changelog." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/basic-memory-vs-graphicle", "json": "https://www.anchorterminal.com/compare/basic-memory-vs-graphicle.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/basic-memory-vs-graphicle.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/basic-memory-vs-graphicle.min.md" }, "markdown": "Basic Memory scores 76.9 (BB) on agent readiness against Graphicle's 70.6 (BB), and leads in 4 of 7 scored categories. Graphicle leads on security \u0026 auth and payments \u0026 pricing. Both do agent memory.\n\n- Basic Memory: grade BB, 76.9/100, rank #38 of 1486. Markdown https://www.anchorterminal.com/tools/basic-memory.md · JSON https://www.anchorterminal.com/api/v1/tools/basic-memory.json\n- Graphicle: grade BB, 70.6/100, rank #192 of 1486. Markdown https://www.anchorterminal.com/tools/graphicle.md · JSON https://www.anchorterminal.com/api/v1/tools/graphicle.json\n- Best memory layers for AI agents: https://www.anchorterminal.com/best/agent-memory/index.md\n- All 353 memory comparisons: https://www.anchorterminal.com/compare/agent-memory/index.md\n\n## Which one, for what\n\n### Basic Memory (BB)\n\nGood for: Memory for coding agents and assistants kept as Markdown the user owns, with search and a graph.\n\nAhead on:\n- Reliability, 83 against 63\n- Schema \u0026 documentation, 89 against 83\n- Maintenance \u0026 community, 91 against 83\n- Transparency \u0026 trust, 82 against 71\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: 1.0 removed every pre-1.0 tool and command with no aliases, so older agent instructions and allowlists break\n\n### Graphicle (BB)\n\nGood for: A developer who wants one local tool that gives Claude Code, Codex or Cursor both code structure and project memory with citations.\n\nAhead on:\n- Security \u0026 auth, 67 against 61\n- Payments \u0026 pricing, 60 against 50\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Version 0.1.10, about two weeks old, with stored-data changes shipped in patch releases\n\n\n## Why the edge\n\n### Reliability: Basic Memory +20\n\n- Basic Memory (83): Local-software lines, as a stdio MCP server the owner runs. `basic-memory` on PyPI with Python 3.12 or newer stated, installed with uv (20). Test, SQLite lifecycle and Docker workflows run on the repository, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 74 open issues and pull requests against 200 commits in the 90 days, with recent bug reports answered by a maintainer within days and one flaky-CI issue open (18 of 25). The changelog calls out breaking changes in their own sections (15). v1.0.0 on 29 October 2026 (15). Total 83.\n- Graphicle (63): Read as local software. Installs from an official Homebrew tap, an install script that checks each archive's SHA-256, or release archives, with macOS and Linux (glibc) on arm64 and x86_64 stated, and since 0.1.5 a Windows preview build that isn't code-signed. No language package registry (20). A public CI workflow formats, lints and tests each of the three crates on macOS and Linux. On 15 October every test job passed on both pushes to main and the cargo-deny job for licences, advisories and sources failed; 0.1.7 (25 October) replaced a yanked crate that cargo-deny warned about, but GitHub's Actions pages weren't readable on 1 November, so the runs are per the 15 October check (18). Outside reports and fixes have been handled in releases (issue #8 on kubernetes speed, pull requests #9 and #10 in 0.1.6 and 0.1.7), but the open issue list couldn't be read on 1 November, so the record is still too thin to judge (15). A dated changelog with eleven releases, each with an \"After upgrading\" section that names the steps a release needs (re-sync, memories that go stale), but large additions and stored-data changes ship in 0.1.x patch bumps (10). Version 0.1.10, not declared stable (0). 20+18+15+10+0 = 63.\n\n### Transparency \u0026 trust: Basic Memory +11\n\n- Basic Memory (82): AGPL-3.0, an OSI licence (30). The terms and privacy policy of 27 October 2026 agree on 30-day retention after cancellation, backups up to 90 days and no training on or sale of content, and name the infrastructure providers (26 of 30). The 1.0 release ships a migration guide mapping every removed tool and command, without a written deprecation period (14 of 20). Telemetry is disclosed in the README with what is and isn't sent and one opt-out, but it is on by default (16 of 20). Total 86.\n- Graphicle (71): Apache-2.0 with NOTICE files that credit Graphify and every adapted project (30). The README privacy section and the FAQ list every case in which the program uses the network, say there is no telemetry or account, and keep data in one SQLite store with deletion receipts. A grep of the source for outbound hosts found only model providers, connectors and GitHub, which agrees. The karlex.ai privacy policy of 14 March 2025 covers the website, not the software (20 of 30). SECURITY.md lists supported versions. No deprecation policy (3 of 20). No telemetry to opt out of, and the network cases are disclosed, with `freshness off` and `--code-only` to limit them (18 of 20). 30+20+3+18 = 71.\n\n### Payments \u0026 pricing: Graphicle +10\n\n- Basic Memory (50): Self-hosted rule, with the price lines read for the cloud. No x402, MPP or L402 (0 of 40). Cloud plans are public, and credits are $0.01 each, but what a credit buys isn't priced per unit (10). The open-source server is free with no card (20). An agent can install it from PyPI and run it with no account (20). Total 50.\n- Graphicle (60): No payment protocol (0). Read with the self-hosted rule. Free under Apache-2.0 with nothing to buy (20). No card or account (20). An agent can install it and run `graphicle setup --yes` with no signup, as the README suggests (20). The commercial team edition is still in private preview with no prices on karlex.ai on 1 November, so there is no paid option to score. 0+20+20+20 = 60.\n\n### Maintenance \u0026 community: Basic Memory +8\n\n- Basic Memory (91): v1.0.0 on 29 October 2026 (30). v0.24.0 and v0.24.1 on 22 October and v1.0.0, three releases in 90 days (20). Recent issues from outside users got maintainer replies within a few days (20 of 25). Verified namespace io.github.basicmachines-co/basic-memory in the official MCP registry, published by a workflow (15). uv.lock and CI, with an open report of an unmaintained dependency (6 of 10). Total 91.\n- Graphicle (83): v0.1.10 on 30 October 2026 (30). Eleven releases, v0.1.0 (14 October) to v0.1.10 (30 October), all inside the last 90 days (20). Outside pull requests #9 and #10 shipped in 0.1.6 and 0.1.7 and issue #8's kubernetes timings drove 0.1.5, per the changelog, with Discussions and a Discord linked, but reply times and open issues weren't readable on 1 November (12 of 25). In the official MCP registry as io.github.Graphicle-AI/graphicle, a GitHub-verified namespace, with 0.1.10 published on 30 October and marked latest (15). The SDKs are still not on PyPI or npm. Pinned GitHub Actions, dependency-graph updates and passing tests, but the licence and advisory job failed on main on 15 October and its later runs weren't readable (6 of 10). 30+20+12+15+6 = 83.\n\n### Schema \u0026 documentation: Basic Memory +6\n\n- Basic Memory (89): Typed JSON Schema inputs on every tool from Pydantic annotations (25). llms.txt on the site and the docs, with Markdown versions of pages (10). Descriptions say what each tool does and point to the next tool, such as `bm_search` ending with \"Read full notes with bm_read\", and `bm_man` serves the manual, with less on when not to use a tool (16 of 20). Closed values for search mode, edit command and schema command, with aliases accepted for common argument names (13 of 15). Typed refusal codes are documented in the changelog and docs, with fewer worked examples per tool (11 of 15). Dated changelog and MCP registry versions, plus an unreleased breaking change after 1.0 (14 of 15). Total 89.\n- Graphicle (83): Every MCP tool has a JSON Schema input with `additionalProperties: false` and required fields marked, read from the tool list fixtures in the repository at v0.1.10 (25). No llms.txt. The docs are Markdown files in the repository that an agent can read raw (5 of 10). Server instructions say which tool to use for structure and which for what the project says, `recall_project` says when to leave the reranker off, and memory tools explain draft review, while graph tools such as `query_graph` carry one-line descriptions (14 of 20). Enums on `mode`, `pack_order`, memory `kind` and `state`, length and item limits, minimum values and closed nested objects (14 of 15). Examples throughout the docs. The OpenAPI file documents 400, 403, 409 and 429 for the HTTP API and limit errors name the setting to change, but MCP error results are not catalogued (10 of 15). A dated changelog, semver crate versions and `/v1` paths (15). 25+5+14+14+10+15 = 83.\n\n### Security \u0026 auth: Graphicle +6\n\n- Basic Memory (61): Local stdio server with no credential, and cloud OAuth 2.1 through WorkOS with read-only or project-scoped keys on Pro (22 of 30). Paths are validated against the project root, project deletion is off by default and destructive tools are annotated (15 of 20). SECURITY.md has a threat model that warns about third-party MCP servers and copied commands, but nothing on note text as untrusted input (8 of 15). A local log file, and cloud audit logs only on Business (8 of 15). SECURITY.md gives an email and a 72-hour response aim but lists only 0.x.x as supported; no security.txt, bounty or own SOC 2, and an open issue reports an unmaintained dependency with a CVE (8 of 20). Total 61.\n- Graphicle (67): Read with the API checklist for a server the owner runs, as for Cognee and Graphiti. Over HTTP each person or agent gets its own key with a role, optional expiry and optional project list, stored as a hash, revocable, and sent in a header with the docs saying never in the URL. The stdio server runs with the owner key, which can read every project, and its graph tools take `repo` to reach other projects (24 of 30). The MCP server has no delete or command tool, agent writes are drafts that a person approves, and `--tools` and per-key project revocation narrow access. No approval step is needed because nothing destructive is exposed (18 of 20). Recall returns documents, connector content and captured sessions, which can carry injected text. Server instructions say memory is evidence, not tool permission, drafts need verbatim quotes, and capture redacts credentials and drops `\u003cprivate\u003e` spans. No general prompt-injection guidance found (9 of 15). Workspace usage counters, `workflow_status` and hash-chained deletion receipts, while the team audit trail belongs to the commercial edition (6 of 15). SECURITY.md with private reporting through GitHub advisories, a security.txt at karlex.ai valid to 7 April 2027 (re-read on 1 November), a cargo-deny advisory check in CI that failed on 15 October, and `### Security` sections in the 0.1.6 and 0.1.7 changelog entries. No bug bounty or certification, and the changelog names no advisory for the 0.1.7 fixes (10 of 20). 24+18+9+6+10 = 67.\n\n## Score by category\n\n| Category | Weight | Basic Memory | Graphicle | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 83 | 63 | Basic Memory +20 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 83 | Basic Memory +6 |\n| Agent ergonomics | 13% (16.2 this run) | 85 | 85 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 61 | 67 | Graphicle +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 60 | Graphicle +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 91 | 83 | Basic Memory +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 82 | 71 | Basic Memory +11 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **76.9 · BB** | **70.6 · BB** | |\n\n## Facts side by side\n\n| Fact | Basic Memory | Graphicle |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Basic Memory LLC | KarLex AI, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | stdio, Streamable HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | AGPL-3.0 | Apache-2.0 |\n| Tools exposed | 13 | 25 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| MCP registry | `io.github.basicmachines-co/basic-memory` | `io.github.Graphicle-AI/graphicle` |\n| Last release | 2026-10-29 | 2026-10-30 |\n| Terms last updated | 2026-10-27 | 2025-03-14 |\n| Privacy policy last updated | 2026-10-27 | 2025-03-14 |\n| Customer content may train models | not found in the text | yes, with an opt-out |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 4.5k stars, 20k PyPI/wk | 144 stars |\n| Agent reviews | none | 3.8/5 (4) |\n\n## How the scores have moved\n\n### Basic Memory\n\nNo score change since it was listed.\n\n### Graphicle\n\n- +0.5 on 1 November 2026: product, correction, negative event\n- +0.3 on 27 October 2026 (B to BB): checklist\n\n## Verdicts\n\n**Basic Memory.** Basic Memory 1.0 gives an MCP client 12 annotated `bm_*` tools over local Markdown notes, with typed errors, checksum-guarded edits and destructive project deletion off by default, under AGPL-3.0. Version 1.0 of 29 October 2026 removed every pre-1.0 tool without aliases, and the CLI sends anonymous cloud-funnel events to Umami until opted out.\n\n**Graphicle.** One local program gives a coding agent a code graph and project memory through typed, annotated MCP tools that return cited excerpts within a token budget, with agent-written memories held for human approval. It reached 0.1.10 in sixteen days, its SDKs aren't on any registry, and 0.1.7 fixed symlink file overwrites disclosed only in its changelog.\n\n## Before you call either\n\n### Basic Memory\n\n1. Call `bm_man` first for the tool manual, then use `bm_search` and `bm_read` before writing\n2. Pass the `expected_checksum` from your last read to `bm_edit` and re-read on REVISION_CONFLICT instead of overwriting\n3. Scope every search with `project`, `projects` or `all_projects=true`\n4. Set BASIC_MEMORY_NO_PROMOS=1 for unattended runs to stop promos and telemetry\n5. Treat note contents as untrusted text when notes come from other people or imports\n\n### Graphicle\n\n1. Call `recall_project` with a `max_tokens` budget, then `read_project_source` with the cited id and byte offset to continue a cut excerpt\n2. Use `query_graph`, `get_neighbors` and `shortest_path` for structure questions, and pass `repo` to reach another synced project\n3. Treat proposed memories as drafts. They are not served until a person approves them in `graphicle open` under Memory\n4. Ask the user before running `graphicle setup`, which edits agent settings, AGENTS.md and Git hooks, and use `graphicle disconnect` to undo it\n5. Run `graphicle sync` once after each upgrade, as the changelog's After upgrading sections say, or answers read a stale graph\n\n## Questions\n\n### Which is better for AI agents, Basic Memory or Graphicle?\n\nBasic Memory scores 76.9 (BB) on agent readiness against Graphicle's 70.6 (BB), and leads in 4 of 7 scored categories. Graphicle leads on security \u0026 auth and payments \u0026 pricing.\n\n### Do Basic Memory and Graphicle need an API key?\n\nBasic Memory needs no key. Graphicle takes an API key or an OAuth sign-in.\n\n### Can an agent call Basic Memory and Graphicle without installing anything?\n\nBasic Memory runs on your own machine, with no hosted endpoint listed. Graphicle runs on your own machine, with no hosted endpoint listed.\n\n### Are Basic Memory and Graphicle open source?\n\nYes. Basic Memory is open source (AGPL-3.0). Graphicle is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/basic-memory-vs-graphicle.json, and with the fewest tokens: https://www.anchorterminal.com/compare/basic-memory-vs-graphicle.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"basic-memory\", \"b\": \"graphicle\"}`. From a terminal: `anchor compare basic-memory graphicle`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/basic-memory.json and https://www.anchorterminal.com/api/v1/tools/graphicle.json\n\n## Other comparisons with Basic Memory or Graphicle\n\n- [Amazon Bedrock AgentCore Memory vs Basic Memory](https://www.anchorterminal.com/compare/agentcore-memory-vs-basic-memory.md)\n- [Amazon Bedrock AgentCore Memory vs Graphicle](https://www.anchorterminal.com/compare/agentcore-memory-vs-graphicle.md)\n- [Basic Memory vs claude-mem](https://www.anchorterminal.com/compare/basic-memory-vs-claude-mem.md)\n- [Basic Memory vs Cognee](https://www.anchorterminal.com/compare/basic-memory-vs-cognee.md)\n- [Basic Memory vs EverOS](https://www.anchorterminal.com/compare/basic-memory-vs-everos.md)\n- [Basic Memory vs Agent Platform Memory Bank](https://www.anchorterminal.com/compare/basic-memory-vs-google-memory-bank.md)\n- [Basic Memory vs Graphiti](https://www.anchorterminal.com/compare/basic-memory-vs-graphiti.md)\n- [Basic Memory vs Hindsight](https://www.anchorterminal.com/compare/basic-memory-vs-hindsight.md)\n- [Basic Memory vs Honcho](https://www.anchorterminal.com/compare/basic-memory-vs-honcho.md)\n- [Basic Memory vs Hy Memory](https://www.anchorterminal.com/compare/basic-memory-vs-hy-memory.md)\n- [Basic Memory vs LangMem](https://www.anchorterminal.com/compare/basic-memory-vs-langmem.md)\n- [Basic Memory vs LocalGhost](https://www.anchorterminal.com/compare/basic-memory-vs-localghost.md)\n- [Basic Memory vs Mem0 Platform + MCP](https://www.anchorterminal.com/compare/basic-memory-vs-mem0.md)\n- [Basic Memory vs MemMachine](https://www.anchorterminal.com/compare/basic-memory-vs-memmachine.md)\n- [Basic Memory vs Memori](https://www.anchorterminal.com/compare/basic-memory-vs-memori.md)\n- [Basic Memory vs Memory (MCP reference server)](https://www.anchorterminal.com/compare/basic-memory-vs-memory-reference-server.md)\n- [Basic Memory vs MemPalace](https://www.anchorterminal.com/compare/basic-memory-vs-mempalace.md)\n- [Basic Memory vs past.dev](https://www.anchorterminal.com/compare/basic-memory-vs-past-dev.md)\n- [Basic Memory vs Supermemory API + MCP](https://www.anchorterminal.com/compare/basic-memory-vs-supermemory.md)\n- [Basic Memory vs TencentDB Agent Memory](https://www.anchorterminal.com/compare/basic-memory-vs-tencentdb-agent-memory.md)\n- [Basic Memory vs Tokenrip](https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip.md)\n- [Basic Memory vs Zep](https://www.anchorterminal.com/compare/basic-memory-vs-zep.md)\n- [claude-mem vs Graphicle](https://www.anchorterminal.com/compare/claude-mem-vs-graphicle.md)\n- [Cognee vs Graphicle](https://www.anchorterminal.com/compare/cognee-vs-graphicle.md)\n- [EverOS vs Graphicle](https://www.anchorterminal.com/compare/everos-vs-graphicle.md)\n- [Agent Platform Memory Bank vs Graphicle](https://www.anchorterminal.com/compare/google-memory-bank-vs-graphicle.md)\n- [AI Memory vs Basic Memory](https://www.anchorterminal.com/compare/ai-memory-vs-basic-memory.md)\n- [AI Memory vs Graphicle](https://www.anchorterminal.com/compare/ai-memory-vs-graphicle.md)\n- [Basic Memory vs Context Mode Engine](https://www.anchorterminal.com/compare/basic-memory-vs-context-mode.md)\n- [Context Mode Engine vs Graphicle](https://www.anchorterminal.com/compare/context-mode-vs-graphicle.md)\n- [Graphicle vs Graphiti](https://www.anchorterminal.com/compare/graphicle-vs-graphiti.md)\n- [Graphicle vs Hindsight](https://www.anchorterminal.com/compare/graphicle-vs-hindsight.md)\n- [Graphicle vs Honcho](https://www.anchorterminal.com/compare/graphicle-vs-honcho.md)\n- [Graphicle vs Hy Memory](https://www.anchorterminal.com/compare/graphicle-vs-hy-memory.md)\n- [Graphicle vs Khoj](https://www.anchorterminal.com/compare/graphicle-vs-khoj.md)\n- [Graphicle vs LangMem](https://www.anchorterminal.com/compare/graphicle-vs-langmem.md)\n- [Graphicle vs Mem0 Platform + MCP](https://www.anchorterminal.com/compare/graphicle-vs-mem0.md)\n- [Graphicle vs MemMachine](https://www.anchorterminal.com/compare/graphicle-vs-memmachine.md)\n- [Graphicle vs Memori](https://www.anchorterminal.com/compare/graphicle-vs-memori.md)\n- [Graphicle vs MemPalace](https://www.anchorterminal.com/compare/graphicle-vs-mempalace.md)\n- [Graphicle vs past.dev](https://www.anchorterminal.com/compare/graphicle-vs-past-dev.md)\n- [Graphicle vs Supermemory API + MCP](https://www.anchorterminal.com/compare/graphicle-vs-supermemory.md)\n- [Graphicle vs TencentDB Agent Memory](https://www.anchorterminal.com/compare/graphicle-vs-tencentdb-agent-memory.md)\n- [Graphicle vs Tokenrip](https://www.anchorterminal.com/compare/graphicle-vs-tokenrip.md)\n- [Graphicle vs Zep](https://www.anchorterminal.com/compare/graphicle-vs-zep.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Basic Memory vs Graphicle", "url": "" } ], "description": "Basic Memory scores 76.9 (BB) to Graphicle's 70.6 (BB) for agent memory. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Basic Memory BB 76.9", "Graphicle BB 70.6", "scores" ], "h1": "Basic Memory vs Graphicle", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/basic-memory-vs-graphicle", "published": "2026-10-01", "section": "tools", "title": "Basic Memory vs Graphicle for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-graphicle" }, "tokens": { "markdown": 5350, "slim": 2930 }, "version": 1 }