claude-mem vs Agent Platform Memory Bank

claude-mem 46

Apache-2.0 engine with the hosted observer, sync and team functions reserved as closed, per docs/ip-boundary.md (25 of 30). SECURITY.md lists every route by which data leaves the machine, but the cmem.ai privacy page, re-read on 4 November, still says "Nothing leaves your device unless you explicitly turn on cloud sync" and that sensitive details are filtered before storage, while secret redaction defaults to off, doesn't cover the hosted observer, and names no retention periods, subprocessors or legal entity. Locally, raw tool uses are kept forever by default (CLAUDE_MEM_TOOL_USES_RETENTION_DAYS 0) and daily logs 30 days since 15.7.0 (12 of 30). Release notes date breaking changes with migration steps, such as 15.0.0 and the removal of Gemini CLI support in 13.10.0, but no written deprecation policy (8 of 20). Telemetry is on by default, documented field by field (including PostHog's city-level location from the sender's IP) with telemetry disable, DO_NOT_TRACK and a separate error-reporting switch, and the installer asks once; the README doesn't mention it (16 of 20).

Agent Platform Memory Bank 81

Closed service under the Google Cloud terms (15). Data residency at rest, CMEK and the Cloud Data Processing Addendum apply; no Memory Bank retention period or time-to-live was read (20 of 30). The rename was announced in the release notes with old and new names listed, and Google's deprecation policy covers GA services (14 of 20). Google Cloud's subprocessor list and regional endpoints are published (16 of 20). Total 65.

claude-mem 50

The worker and MCP HTTP transport bind to loopback and check Host and Origin, with no credential (20), the server beta's cmem_ keys are scoped and stored hashed (5), and the hosted private MCP link is a bearer secret in the URL per the privacy page (less 10), 15 of 30. Plan mode prompts before the writing tools, <private> tags keep content out of storage and work state can be disabled, but hooks capture all tool input and output by default and the Antigravity adapter answered allow to every agy tool call until 26 October 2026 (10 of 20). Stored observations summarise tool output that can carry injected text and are injected at the next SessionStart; we found no guidance on that, and redaction of secrets is off by default (3 of 15). Local logs, the My Work viewer, an SSE event stream and raw tool I/O through get_tool_uses (12 of 15). SECURITY.md (moved to .github/SECURITY.md in 15.8.1) with a private advisory route, a 48-hour acknowledgement and a published fix history; no security.txt, bug bounty or certification (10 of 20).

Agent Platform Memory Bank 72

OAuth 2.0 with IAM and service accounts (30), less 10, as for the other Google API listings, because the v1 discovery document lists access_token, oauth_token and key as query parameters (20 of 30). IAM Conditions can restrict access by memory scope; purge and delete have no confirmation (15 of 20). Memories are written by an LLM from conversation content and returned to agents, with no injection guidance found (5 of 15). Access Transparency and Access Approval are listed; Cloud Audit Logs coverage for Memory Bank wasn't read (12 of 15). Google's valid security.txt, vulnerability reward programme and certifications, with HIPAA listed for Memory Bank (20). Total 72.

claude-mem 76

v15.9.0 tagged on 2 November 2026, with its changelog entry dated the same day (30). Tags v15.0.0 (20 October) to v15.9.0 in the shallow clone alone, 16 in two weeks, and 78 GitHub releases from 1 August to 29 October per the 30 October reading (20). Issue #5078, reported on 26 October 2026, was fixed by a contributor's pull request and released in 15.3.0 the same day; the 15.9.0 notes thank 25 outside contributors; reply times weren't re-read (18 of 25). Not in the official MCP registry per the 30 October search (0). CI configured on main, Dependabot per SECURITY.md, two runtime dependencies in the published package (8 of 10).

Agent Platform Memory Bank 62

The newest Memory Bank release notes are of 20 August 2026 (IngestEvents GA, metadata, Gemini Embedding 2), 78 days before the check, and billing started on 1 September (20). Three Memory Bank entries in the 90 days, all on 20 August (10 of 20). Public release notes and Cloud Customer Care (12 of 15). google-cloud-agentplatform 2.7.0 on 28 October 2026, twelve releases in 90 days per its PyPI release feed, plus ADK (15). SDK test status not checked (5 of 10). Total 62.

claude-mem 84

Every one of the 26 MCP tools declares a JSON Schema input (25). llms.txt at docs.claude-mem.ai with Markdown copies of each page (10). Descriptions give purpose and order of use (search, then timeline, then get_observations) and say when not to call a tool (get_tool_uses "rarely needed", dumb_search "fast, but shallow"), but the README says recall uses 4 tools and lists 3 while the server advertises 19 (15 of 20). Required fields are marked and some limits have minimum and maximum, but type, orderBy and obs_type are free strings described in prose, limit is a number rather than an integer on most tools, and metadata and fields are open objects (8 of 15). README examples and a worker API reference with 400 and 404 error bodies (11 of 15). Keep a Changelog file and release notes for each version (15).

Agent Platform Memory Bank 75

Google's discovery document is a machine-readable contract for every memory method (25). No llms.txt or Markdown docs found (0). Method descriptions are 13 to 39 characters, one-line summaries, while the guides explain when to generate from sessions or from direct facts (12 of 20). Typed schemas with required fields in the discovery document (12 of 15). Python examples, a troubleshooting page and a documented 404 for deleted memories (11 of 15). v1 and v1beta1 and dated release notes (15). Total 75.

claude-mem 75

Scored as local software. Official npm package claude-mem installed through npx claude-mem install, with Node ^20.19.0 or 22.12 and later and Bun 1.1.31 or later stated in package.json (20). ci.yml runs on pushes to main and runs the test lanes (fast and integration), the OpenClaw, My Work, Cowork and Hermes suites, beside Windows, media-runtime and ods-native workflows. The 29 October push runs passed per the 30 October reading of GitHub's API, which answers 403 in this session, so today's result is unread (15 of 25). The 30 October reading counted 129 open issues and pull requests combined, and the changelog records a July 2026 worker restart loop fixed in 13.12.1; reply times weren't re-read (10 of 25). Majors carry breaking changes with migration notes, such as 15.0.0 removing mem_search and flash_search, and 15.7.0 to 15.9.0 list none (15). Version 15.9.0 (15).

Agent Platform Memory Bank 68

Hosted lines. Google Cloud status dashboard with per-product history (20). Its incident feed, read on 6 November 2026, holds four incidents since 8 August (20 August, 27 products; 1 September, us-central1-b; 8 October, Cloud Storage; 20 October, europe-west2, 38 products), and none names Agent Platform, Vertex or Memory Bank (30). No Memory Bank quotas or rate limits were found; the platform quotas path guessed returned 404 (0, unchecked). Generation is a long-running operation with wait and cancel methods, and Google's retry guidance wasn't re-read for this API (8 of 15). No SLA for Memory Bank was found in the pages read (0, unchecked). Memory profiles, IngestEvents and multi-regional endpoints are GA (10). Total 68.