{ "data": { "a": { "slug": "everos", "name": "EverOS", "vendor": "Evermind AI, Inc.", "vendorUrl": "https://evermind.ai", "kind": "http-api", "category": "agent-memory", "summary": "EverOS, formerly EverMemOS, is EverMind's open-source memory runtime for agents. It stores conversations, files and agent trajectories as Markdown with SQLite and LanceDB indexes, behind a local HTTP API and MCP server, with a managed EverOS Cloud.", "url": "https://www.anchorterminal.com/tools/everos", "markdownUrl": "https://www.anchorterminal.com/tools/everos.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/everos.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/everos.json", "dns": "everos.grade.anchorterminal.com", "repo": "https://github.com/EverMind-AI/EverOS", "license": "Apache-2.0", "transports": [ "http", "stdio" ], "packages": [ { "registry": "pypi", "name": "everos" }, { "registry": "pypi", "name": "everos-mcp" } ], "auth": "none", "authNotes": "The self-hosted server has no authentication and binds to 127.0.0.1:8000 by default. The owner supplies LLM and embedding provider keys in ~/.everos/everos.toml. EverOS Cloud uses a bearer API key from the console at everos.evermind.ai, and its hosted MCP connector signs in with an EverOS account.", "pricing": "freemium", "pricingNotes": "Free under Apache-2.0 to run locally, with LLM and embedding costs paid to the chosen provider. EverOS Cloud has a console and API keys, but no plan or price was found on evermind.ai or docs.evermind.ai.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the OpenAPI document, llms.txt or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": 7, "popularity": { "githubStars": 13839, "npmWeekly": null, "pypiWeekly": 4033, "asOf": "2026-11-06" }, "docsUrl": "https://docs.evermind.ai", "llmsTxt": "https://docs.evermind.ai/llms.txt", "openapi": "https://github.com/EverMind-AI/EverOS/blob/main/docs/openapi.json", "capabilities": [ "memory.store", "memory.search", "memory.user", "memory.delete" ], "tags": [ "open-source", "self-hosted", "local", "hosted", "apache-2.0", "python", "mcp", "openapi", "llms-txt", "markdown", "no-auth" ], "lastRelease": "2026-10-22", "graded": true, "anchor": { "graded": true, "score": 69.4, "grade": "B", "agentReady": false, "rank": 246, "ranked": true, "rankOf": 1486, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 80, "payments": 40, "reliability": 79, "schema": 89, "security": 47, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "EverOS keeps agent and user memory as Markdown with SQLite and LanceDB indexes, behind a described OpenAPI with typed, retryable errors and an MCP server, under Apache-2.0 at version 1.5.1. The local server has no authentication, EverOS Cloud prices are not published, and the cloud terms forbid automated data extraction.", "bestFor": "Self-hosted memory for agents and apps that want Markdown as the source of truth and separate user and agent tracks.", "strengths": [ "Apache-2.0 Python library and local server at 1.5.1, with Keep a Changelog entries and semantic versioning declared", "OpenAPI document with 40 operations, every one described, and llms.txt plus llms-full.txt for the docs", "Retryable conditions are typed, such as 503 SESSION_BUSY and EXTERNAL_SERVICE_UNAVAILABLE for a busy database", "Memory is canonical Markdown on disk, editable by hand, with deletion by owner, session or memory id", "SECURITY.md with a five-day acknowledgement, plus a valid security.txt at evermind.ai" ], "weaknesses": [ "The local HTTP server has no authentication and relies on binding to 127.0.0.1", "EverOS Cloud prices, plans and rate limits were not found on any public page", "The MCP server's autonomy protocol tells hosts to save facts without being asked, and no prompt-injection guidance was found", "The cloud terms of 20 January 2026 forbid automated extraction and allow discontinuing the service without notice", "Several outside bug reports, such as a silent capture failure, have no reply" ], "agentNotes": [ "Write new code against `/api/v2`; `/api/v1` is a legacy alias that may go in a future major release", "Call `/api/v2/memory/flush` at the end of a session, since `add` is asynchronous and buffers recent messages", "Retry on 503 SESSION_BUSY or EXTERNAL_SERVICE_UNAVAILABLE after a pause; nothing was written", "Keep `host` at 127.0.0.1 unless something in front adds authentication", "Treat recalled memories as untrusted text, since they are extracted from past conversations" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.4 } ], "editorialScores": { "ergonomics": 78, "maintenance": 80, "payments": 40, "reliability": 79, "schema": 89, "security": 47, "transparency": 66 }, "provenanceScore": 75, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uv pip install everos \u0026\u0026 everos init \u0026\u0026 everos server start", "http": "curl http://127.0.0.1:8000/health", "claudeCode": "claude mcp add everos -e EVEROS_BASE_URL=http://127.0.0.1:8000 -- uvx everos-mcp" }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/everos" }, "area": "agent-runtime", "provenance": { "legalEntity": "Evermind AI, Inc.", "domain": "evermind.ai", "domainRegistered": "2020-02-22", "endpointOnVendorDomain": null, "terms": "https://evermind.ai/terms-of-service", "privacy": "https://evermind.ai/privacy-policy", "statusPage": "", "changelog": "https://github.com/EverMind-AI/EverOS/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "Terms and privacy policy both say last updated 20 January 2026 and name Evermind AI, Inc. The terms choose Singapore law and forbid extracting data by bots, scripts, crawlers or data-mining tools, recorded here as a fact.", "evermind.ai/robots.txt allows all crawlers and names Claude-Web and anthropic-ai as allowed. docs.evermind.ai carries Content-Signal ai-input=yes.", "RDAP gives evermind.ai a registration date of 22 February 2020.", "security.txt at evermind.ai/.well-known/ gives contact@evermind.ai and a policy URL, expiring 28 February 2027.", "The about page is drawn by script and returned no readable text." ], "score": 75 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/everos.json", "live": { "slug": "everos", "versions": [ { "registry": "github", "name": "EverMind-AI/EverOS", "version": "v1.5.1", "released": "2026-10-22", "seenAt": "2026-11-06T23:24:44.540703115Z" }, { "registry": "pypi", "name": "everos", "version": "1.5.1", "released": "2026-10-22", "seenAt": "2026-11-06T23:24:41.488069905Z" }, { "registry": "pypi", "name": "everos-mcp", "version": "0.1.1", "released": "2026-10-15", "seenAt": "2026-11-06T23:24:42.65503941Z" } ], "githubStars": 13840, "pypiWeekly": 4033, "securityTxt": { "url": "https://evermind.ai/.well-known/security.txt", "state": "valid", "expires": "2027-02-28T00:00:00Z", "checkedAt": "2026-11-07T16:01:32.419431813Z" }, "llmsTxt": { "url": "https://docs.evermind.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:26.933711899Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/EverMind-AI/EverOS/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:19.185692468Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "40ab92cf4d99" }, { "url": "https://evermind.ai/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:09:24.819286526Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dcd843ca72fe" }, { "url": "https://evermind.ai/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:09:28.72898661Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "009377ab61a3" } ], "updatedAt": "2026-11-07T16:01:32.419431813Z" } }, "answer": "past.dev and EverOS score within a point of each other on agent readiness, 69.8 (B) and 69.4 (B). EverOS leads on reliability and transparency \u0026 trust.", "b": { "slug": "past-dev", "name": "past.dev", "vendor": "Revo Inc. (doing business as Past Corp.)", "vendorUrl": "https://past.dev", "kind": "http-api", "category": "agent-memory", "summary": "past.dev is a hosted long-term memory API for AI agents. Applications send timestamped text and recall ranked, dated evidence as a named identity, with per-audience access, OAuth MCP servers and plugins for coding agents.", "url": "https://www.anchorterminal.com/tools/past-dev", "markdownUrl": "https://www.anchorterminal.com/tools/past-dev.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/past-dev.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/past-dev.json", "dns": "past-dev.grade.anchorterminal.com", "license": "Proprietary hosted service under past.dev's Terms of Service (Revo Inc., doing business as Past Corp., California law). The benchmark harness and the Claude Code and Codex plugins are MIT-licensed on GitHub under pastdotdev", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.past.dev", "packages": [], "auth": "mixed", "authNotes": "The Memory API takes a Bearer project key (`past_sk_`), scoped to one project, created in the console at app.past.dev and revocable there or through the API. An organisation's management key (`past_mk_`) creates projects and project keys and reads no memory. An agent can also get a short-lived access token for one person through an `agent_auth` flow, with `memory:read` and `memory:write` scopes, once the person approves it in a browser. The account MCP server at app.past.dev/mcp uses OAuth 2.1 with PKCE and short-lived tokens. Browser calls to the API are refused by CORS. Access starts with a self-serve browser signup at sso.past.dev.", "pricing": "freemium", "pricingNotes": "Metered in credits, one per 350 bytes of ingested content, at least one per data point. Pay as you go is $0 a month with 150,000 credits once (400,000 with a work email), no card required, 1 credit per recall, 1 project, 500 requests a minute and 365 days of data retention. Flex is $99 a month with 400,000 credits, unlimited recall within fair use, 5 projects, 750 requests a minute, webhooks and 3 years of retention. Enterprise is custom from 5 million credits a month. Extra credits cost $30 per 100,000, falling to $0.13 per 1,000 from 10 million. Each webhook event costs 0.1 credit. Storage, seats and deletion aren't metered (https://past.dev/pricing).", "priceSummary": "$99 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI file, pricing.md or the pricing page. A spent balance returns `402 out-of-credits` with credit figures and no payment payload (checked 2026-10-19).", "endpoints": [] }, "toolCount": 56, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-19" }, "docsUrl": "https://past.dev/docs/memory-api/overview", "llmsTxt": "https://past.dev/llms.txt", "openapi": "https://past.dev/openapi.json", "capabilities": [ "memory.store", "memory.search", "memory.user", "memory.graph", "memory.delete" ], "tags": [ "official", "hosted", "closed-source", "freemium", "free-tier", "no-card", "mcp", "oauth", "llms-txt", "openapi", "enterprise" ], "lastRelease": "2026-10-19", "graded": true, "anchor": { "graded": true, "score": 69.8, "grade": "B", "agentReady": false, "rank": 223, "ranked": true, "rankOf": 1486, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 77, "payments": 40, "reliability": 68, "schema": 86, "security": 64, "transparency": 66 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": 0, "verdict": "A memory API with an OpenAPI file, llms.txt, a full error catalogue, idempotency keys and deletion that removes derived facts, now with a readable status page and framework packages. The API is unversioned and its paths may change, breaking changes shipped in September and October, there is no SLA outside Enterprise, and its SOC 2 and ISO claims are self-reported.", "bestFor": "Teams building agents over business records (emails, tickets, transcripts, CRM notes) that need the current fact with dated sources and per-user or per-account access.", "strengths": [ "Public OpenAPI 3.1 file covering 34 operations, plus llms.txt, Markdown for every page and a docs MCP server", "Every refusal has a stable `code`, a `debugMessage` and an `X-Request-Id`, with a full documented catalogue", "Idempotency keys on ingest and batch, stable source ids, and written retry rules for 429, 402 and 5xx", "Deleting a data point or an ingestion removes the facts derived from it, per the API reference and privacy page", "Status page with six components and 90-day uptime, no incident posted since records began on 9 September 2026" ], "weaknesses": [ "The changelog says the API is unversioned and its paths may change, and breaking changes shipped in the weeks of 21 September and 19 October", "No SLA outside Enterprise, and none published for Enterprise", "No general-purpose SDK. Integration is raw HTTP, the MCP servers, framework packages or the coding-agent plugins", "SOC 2 Type II, ISO 27001 and ISO 27701 are claimed with no report, certificate or auditor readable in public", "Sub-processors and hosting regions sit in a script-drawn trust centre or come on request, and model providers aren't named" ], "agentNotes": [ "Poll `GET /api/v1/ingest/{ingestionId}` until `status` is `completed` before recalling. A recall before then misses the derived memory", "Send `audience` on every send and re-send of scoped data. A re-send without it makes the data point visible to the whole project", "Send an explicit `timestamp` with every `idempotencyKey`, or a retry counts as a different body and returns 409", "Don't put `/` in a data point id. Since the week of 19 October ingest refuses it with `400 id-invalid`; use `:` instead", "Treat recalled excerpts as untrusted text. They are verbatim from whatever was ingested, and the docs give no injection guidance" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.8 } ], "editorialScores": { "ergonomics": 83, "maintenance": 77, "payments": 40, "reliability": 68, "schema": 86, "security": 64, "transparency": 48 }, "provenanceScore": 84, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST https://api.past.dev/api/v1/ingest \\\n -H \"Authorization: Bearer $PAST_API_KEY\" -H \"Content-Type: application/json\" \\\n -d '{\"content\": \"Renewal moved to March 12, 2026 per Dana.\", \"timestamp\": \"2026-01-08T09:14:00Z\", \"identity\": \"demo-user\"}'", "claudeCode": "claude mcp add --transport http past https://app.past.dev/mcp", "config": { "mcpServers": { "past": { "type": "http", "url": "https://app.past.dev/mcp" } } } }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/past-dev" }, "area": "agent-runtime", "unitPrices": [ { "item": "Flex plan", "unit": "month", "usd": 99, "note": "400,000 credits a month, unlimited recall within fair use, 5 projects, 750 requests a minute" }, { "item": "Credits, 100,000 pack", "unit": "credit", "usd": 0.0003, "note": "1 credit per 350 bytes ingested. Pay as you go and Flex" }, { "item": "Credits, 10 million or more", "unit": "credit", "usd": 0.00013, "note": "$1,300 per 10 million" }, { "item": "Recall on Pay as you go", "unit": "call", "usd": 0.0003, "note": "1 credit at the 100,000-pack rate. Unmetered on Flex and Enterprise within fair use" } ], "provenance": { "legalEntity": "Revo Inc.", "domain": "past.dev", "domainRegistered": "2026-08-18", "domainNote": "RDAP for past.dev gives a registration date of 2026-08-18 through Cloudflare, Inc. The privacy policy and terms name Revo Inc., doing business as Past Corp.; the site footer reads Past Corp.", "endpointOnVendorDomain": true, "terms": "https://past.dev/terms", "privacy": "https://past.dev/privacy", "statusPage": "https://past.dev/status", "changelog": "https://past.dev/changelog", "securityTxt": "valid", "checked": "2026-11-02", "notes": [ "The Terms of Service (last updated 27 October 2026) are between the user and Revo Inc., a Delaware corporation doing business as Past Corp., under California law with courts in San Francisco. They no longer describe the service as in early access.", "Revo Inc. also operates revo.ai, a team AI assistant, from 211 Gough St, Ste 201, San Francisco, per that site's footer. past.dev's security page and privacy policy link Revo's trust centre at security.revo.ai.", "past.dev/status lists six components with 90-day uptime (100 per cent on 2 November 2026), and its history page says records begin on 9 September 2026 with no incident reported. On 19 October 2026 the uptime read \"no data\" and the history didn't load.", "past.dev/.well-known/security.txt names support@past.dev, expires 2027-05-01 and links the security page.", "The API (api.past.dev), the console and account MCP server (app.past.dev), sign-in (sso.past.dev) and the docs are all on past.dev. robots.txt disallows /api/ for other agents and sets Content-Signal ai-train=no, search=yes, ai-input=yes." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/past-dev.json", "live": { "slug": "past-dev", "probe": { "target": "https://api.past.dev", "method": "get", "lastAt": "2026-11-07T18:20:45.910360625Z", "lastOk": true, "lastStatus": 404, "lastMs": 527, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 352, "p95ms24h": 481, "samples24h": 239, "samples30d": 4684, "days": [ { "date": "2026-10-19", "probes": 71, "ok": 71 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://past.dev/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:34.877788521Z" }, "securityTxt": { "url": "https://past.dev/.well-known/security.txt", "state": "valid", "expires": "2027-05-06T15:59:52.262Z", "checkedAt": "2026-11-07T15:59:52.151716859Z" }, "llmsTxt": { "url": "https://past.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:35.487477372Z" }, "domain": { "domain": "past.dev", "registered": "2026-08-18", "source": "https://pubapi.registry.google/rdap/domain/past.dev", "checkedAt": "2026-11-01T14:25:12.797367084Z" }, "pages": [ { "url": "https://past.dev/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:15:59.437048986Z", "changedAt": "2026-11-07T14:15:59.437048986Z", "fingerprint": "118ca2acffdb" }, { "url": "https://past.dev/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:16:01.657961305Z", "changedAt": "2026-11-07T14:16:01.657961305Z", "fingerprint": "6d760edbf253" }, { "url": "https://past.dev/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:16:03.606625966Z", "changedAt": "2026-11-07T14:16:03.606625966Z", "fingerprint": "e12997524d1c" }, { "url": "https://past.dev/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:16:05.831980154Z", "changedAt": "2026-11-07T14:16:05.831980154Z", "fingerprint": "47867f26df49" } ], "mcpTools": { "url": "https://app.past.dev/mcp", "checkedAt": "2026-11-07T01:46:45.603162899Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:45.603162899Z" }, "updatedAt": "2026-11-07T18:20:45.910360625Z" } }, "edges": [ { "by": 17, "category": "security", "leads": "past-dev", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading for software the owner runs. The local server has no authentication and no security scheme in the OpenAPI document, relying on a 127.0.0.1 bind by default (15 of 30). No read-only mode; the cloud purge is two-step (8 of 20). Memories are extracted from conversations and returned into prompts, and everos-mcp tells hosts to save facts unprompted, with no injection guidance found (4 of 15). Structured logs and lock metrics, no audit log (6 of 15). SECURITY.md with a reporting address, five-day acknowledgement, supported versions and a published-advisories section, plus a valid security.txt (14 of 20). Total 47.", "b": "Project-scoped keys, revocable and rotatable by minting a replacement, a separate management key that reads no memory, OAuth 2.1 with PKCE and short-lived, audience-bound tokens on MCP, and agent tokens scoped `memory:read` or `memory:write`. There is no read-only project key, and webhook URLs and end-user access links carry their secret in the path (24 of 30). Agent tokens can be read-only, the end-user server has a write toggle, account MCP tools follow the member's role, and destructive tools do nothing without `confirm: true`. A project key can still delete any data in its project (15 of 20). Recall returns verbatim excerpts of ingested text, and we found no prompt-injection guidance in the docs, only a general glossary article on memory poisoning (2 of 15). Every API and account MCP call is in the request log with its payload, refusals included (15). security.txt is valid until 1 May 2027 and the security page names support@past.dev for vulnerability reports. No bug bounty or public advisories. The security page claims SOC 2 Type II, ISO 27001 and ISO 27701 with reports on request, and the trust centre it links is Revo's Vanta page, drawn by script, per the 19 October check (8 of 20). 24 + 15 + 2 + 15 + 8 = 64." }, "scores": { "a": 47, "b": 64 } }, { "by": 11, "category": "reliability", "leads": "everos", "name": "Reliability", "reasons": { "a": "Local-software lines, as a library and server the owner runs. `everos` on PyPI with Python 3.12 or newer stated, plus a Windows guide (20). ci.yml runs on pushes and pull requests and the repository has a tests tree, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 43 open issues and pull requests against 82 commits in 90 days; several outside bug reports, including a silent capture failure in the DSH plugin, have no reply (14 of 25). Keep a Changelog with semantic versioning declared and a 1.0 migration guide (15). Version 1.5.1 (15). Total 79.", "b": "Graded on the hosted Memory API with the hosted lines. past.dev/status lists six components (Memory API, ingestion, recall, console, MCP servers, documentation), each with a 90-day uptime figure (100 per cent on 2 November), and a readable incident history. On 19 October the uptime figures read \"no data\" and the history did not load (20; was 10). The history page says records begin on 9 September 2026 and no incident has been reported, so the record covers 54 of the 90 days from 4 August. A readable record shorter than 90 days on a page that has never posted scores 15, as this run settled for short records (15; was 5). Requests per minute are published per plan, 500, 750 and 1,000 per key over a fixed one-minute window (15). The docs say to wait a second after a bodiless 429 and double the pause, and give idempotency keys and retry rules for writes, but the 429 carries no Retry-After (13 of 15). The terms of 27 October 2026 say there is no service level commitment outside Enterprise, and none is published for Enterprise (0). The new terms no longer describe the service as in early access and no page we read labels it beta, but the changelog still says the API is unversioned and its paths may change, read as a young API that may change, 5 as for excaliclaw (5; was 0). 20 + 15 + 15 + 13 + 0 + 5 = 68." }, "scores": { "a": 79, "b": 68 } }, { "by": 5, "category": "ergonomics", "leads": "past-dev", "name": "Agent ergonomics", "reasons": { "a": "Read for the API, with seven MCP tools on top. Searches take `top_k` and a method, and responses can be scoped by five ids (20 of 25). Filters nest with AND and OR, and `/get` pages results (18 of 20). Errors carry typed codes and say which are retryable (16 of 20). `add` is queued and returns 202, a busy session refuses deletion with nothing deleted, and the cloud purge needs a nonce confirmed within five minutes (12 of 20). A demo runs with no key and the minimal setup needs one OpenRouter key, with a Python library and the MCP server, one language (12 of 15). Total 78.", "b": "Graded on the Memory API, with the MCP servers noted. Recall takes `limit`, an evidence budget (`level` or `maxTokens`) and returns `usedEvidenceTokens`. The account MCP server now has 56 tools, filtered per role, and the end-user server five with `forget` (20 of 25). Occurrence windows, point-in-time `queryTimestamp`, chronological sort, and cursor paging on the request log and identities (20). Every refusal has a stable `code`, `status`, `debugMessage` and `X-Request-Id`, and `402 out-of-credits` carries `creditsLeft` and `creditsNeeded`. The 429 has no body (18 of 20). `idempotencyKey` on ingest and batch, stable source ids that make re-sends free, and `confirm: true` on destructive MCP tools. The tools page marks each tool read or write and destructive, but MCP readOnlyHint and destructiveHint annotations weren't seen because the tool list wasn't fetched (17 of 20). Two required fields on ingest and recall. Since the 19 October check past.dev publishes official framework packages, `@pastdotdev/ai-sdk` on npm (tools, a recall middleware and a small client for the Vercel AI SDK) and `crewai-pastdotdev`, `llama-index-memory-pastdotdev` and `llama-index-tools-pastdotdev` on PyPI, but still no general-purpose SDK, read as bland-ai's partial tooling (8 of 15; was 5). 20 + 20 + 18 + 17 + 8 = 83." }, "scores": { "a": 78, "b": 83 } }, { "by": 5, "category": "transparency", "leads": "everos", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 with a NOTICE file (30). Local data stays in the owner's Markdown and indexes. For the cloud, the privacy policy gives no retention periods, the terms and privacy policy word the training exceptions differently, and the privacy contact link points to a miromind.ai address (12 of 30). The README marks `/api/v1` as a legacy alias that may be removed in a future major release, and a 1.0 migration guide exists, with no notice period (14 of 20). No outbound telemetry was found in the source, and the docs don't address it (10 of 20). Total 66.", "b": "Closed service under clear, dated terms (27 October 2026) naming Revo Inc., a Delaware corporation doing business as Past Corp. (15). The privacy policy (27 October 2026) says content isn't used for training, deletion removes derived facts, a deleted organisation's backups expire within 7 days, the request log follows the plan's retention and a project and everything derived from it are deleted on request. The security page says model providers process requests with zero retention. The pricing page gives data retention of 365 days on Pay as you go and 3 years on Flex, while the privacy policy says memory is kept while the organisation exists, so the two don't fully agree (20 of 30). The terms promise email before a change removes a capability an account uses, and the changelog says breaking changes are announced before release. Breaking changes shipped in the weeks of 21 September and 19 October, and there is no versioning or dated deprecation policy (8 of 20). AWS is named as host. The privacy policy now puts the sub-processor list and hosting regions in the trust centre at security.revo.ai, which is drawn by script and wasn't readable on 19 October, and the security page gives them on request (5 of 20). 15 + 20 + 8 + 5 = 48." }, "scores": { "a": 71, "b": 66 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Evermind AI, Inc.", "b": "Revo Inc. (doing business as Past Corp.)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.past.dev", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary hosted service under past.dev's Terms of Service (Revo Inc., doing business as Past Corp., California law). The benchmark harness and the Claude Code and Codex plugins are MIT-licensed on GitHub under pastdotdev", "name": "Licence" }, { "a": "7", "b": "56", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-22", "b": "2026-10-19", "name": "Last release" }, { "a": "2026-01-20", "b": "2026-10-30", "name": "Terms last updated" }, { "a": "2026-01-20", "b": "2026-10-30", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "14k stars, 4k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "past.dev and EverOS score within a point of each other on agent readiness, 69.8 (B) and 69.4 (B). EverOS leads on reliability and transparency \u0026 trust.", "question": "Which is better for AI agents, EverOS or past.dev?" }, { "answer": "EverOS needs no key. past.dev takes an API key or an OAuth sign-in.", "question": "Do EverOS and past.dev need an API key?" }, { "answer": "EverOS runs on your own machine, with no hosted endpoint listed. past.dev has a hosted endpoint at https://api.past.dev.", "question": "Can an agent call EverOS and past.dev without installing anything?" }, { "answer": "EverOS is open source (Apache-2.0). No open-source release is listed for past.dev.", "question": "Are EverOS and past.dev open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 79 against 68", "Transparency \u0026 trust, 71 against 66" ], "also": [ "No key needed to call it", "Runs on your own machine", "Open source" ], "goodFor": "Self-hosted memory for agents and apps that want Markdown as the source of truth and separate user and agent tracks.", "slug": "everos", "watchFor": "The local HTTP server has no authentication and relies on binding to 127.0.0.1" }, { "aheadOn": [ "Agent ergonomics, 83 against 78", "Security \u0026 auth, 64 against 47" ], "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "Teams building agents over business records (emails, tickets, transcripts, CRM notes) that need the current fact with dated sources and per-user or per-account access.", "slug": "past-dev", "watchFor": "The changelog says the API is unversioned and its paths may change, and breaking changes shipped in the weeks of 21 September and 19 October" } ], "history": { "everos": null, "past-dev": [ { "causes": [ "product" ], "date": "2026-11-02", "delta": 6.1, "from": 63.7, "fromGrade": "B", "to": 69.8, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-30", "delta": -0.1, "from": 63.8, "fromGrade": "B", "to": 63.7, "toGrade": "B" } ] }, "job": { "capability": "memory.store", "name": "Agent memory" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-everos.json", "title": "Amazon Bedrock AgentCore Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-past-dev.json", "title": "Amazon Bedrock AgentCore Memory vs past.dev", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-everos.json", "title": "Basic Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-past-dev.json", "title": "Basic Memory vs past.dev", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-everos.json", "title": "claude-mem vs EverOS", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-past-dev.json", "title": "claude-mem vs past.dev", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-everos.json", "title": "Cognee vs EverOS", "url": "https://www.anchorterminal.com/compare/cognee-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-past-dev.json", "title": "Cognee vs past.dev", "url": "https://www.anchorterminal.com/compare/cognee-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-google-memory-bank.json", "title": "EverOS vs Agent Platform Memory Bank", "url": "https://www.anchorterminal.com/compare/everos-vs-google-memory-bank" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-graphicle.json", "title": "EverOS vs Graphicle", "url": "https://www.anchorterminal.com/compare/everos-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-graphiti.json", "title": "EverOS vs Graphiti", "url": "https://www.anchorterminal.com/compare/everos-vs-graphiti" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-hindsight.json", "title": "EverOS vs Hindsight", "url": "https://www.anchorterminal.com/compare/everos-vs-hindsight" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-honcho.json", "title": "EverOS vs Honcho", "url": "https://www.anchorterminal.com/compare/everos-vs-honcho" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-hy-memory.json", "title": "EverOS vs Hy Memory", "url": "https://www.anchorterminal.com/compare/everos-vs-hy-memory" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-langmem.json", "title": "EverOS vs LangMem", "url": "https://www.anchorterminal.com/compare/everos-vs-langmem" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-localghost.json", "title": "EverOS vs LocalGhost", "url": "https://www.anchorterminal.com/compare/everos-vs-localghost" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-mem0.json", "title": "EverOS vs Mem0 Platform + MCP", "url": "https://www.anchorterminal.com/compare/everos-vs-mem0" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memmachine.json", "title": "EverOS vs MemMachine", "url": "https://www.anchorterminal.com/compare/everos-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memori.json", "title": "EverOS vs Memori", "url": "https://www.anchorterminal.com/compare/everos-vs-memori" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memory-reference-server.json", "title": "EverOS vs Memory (MCP reference server)", "url": "https://www.anchorterminal.com/compare/everos-vs-memory-reference-server" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-mempalace.json", "title": "EverOS vs MemPalace", "url": "https://www.anchorterminal.com/compare/everos-vs-mempalace" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-supermemory.json", "title": "EverOS vs Supermemory API + MCP", "url": "https://www.anchorterminal.com/compare/everos-vs-supermemory" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-tencentdb-agent-memory.json", "title": "EverOS vs TencentDB Agent Memory", "url": "https://www.anchorterminal.com/compare/everos-vs-tencentdb-agent-memory" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-tokenrip.json", "title": "EverOS vs Tokenrip", "url": "https://www.anchorterminal.com/compare/everos-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-zep.json", "title": "EverOS vs Zep", "url": "https://www.anchorterminal.com/compare/everos-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/google-memory-bank-vs-past-dev.json", "title": "Agent Platform Memory Bank vs past.dev", "url": "https://www.anchorterminal.com/compare/google-memory-bank-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/graphiti-vs-past-dev.json", "title": "Graphiti vs past.dev", "url": "https://www.anchorterminal.com/compare/graphiti-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/hindsight-vs-past-dev.json", "title": "Hindsight vs past.dev", "url": "https://www.anchorterminal.com/compare/hindsight-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/honcho-vs-past-dev.json", "title": "Honcho vs past.dev", "url": "https://www.anchorterminal.com/compare/honcho-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/hy-memory-vs-past-dev.json", "title": "Hy Memory vs past.dev", "url": "https://www.anchorterminal.com/compare/hy-memory-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/langmem-vs-past-dev.json", "title": "LangMem vs past.dev", "url": "https://www.anchorterminal.com/compare/langmem-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/localghost-vs-past-dev.json", "title": "LocalGhost vs past.dev", "url": "https://www.anchorterminal.com/compare/localghost-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/mem0-vs-past-dev.json", "title": "Mem0 Platform + MCP vs past.dev", "url": "https://www.anchorterminal.com/compare/mem0-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-past-dev.json", "title": "MemMachine vs past.dev", "url": "https://www.anchorterminal.com/compare/memmachine-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/memori-vs-past-dev.json", "title": "Memori vs past.dev", "url": "https://www.anchorterminal.com/compare/memori-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/memory-reference-server-vs-past-dev.json", "title": "Memory (MCP reference server) vs past.dev", "url": "https://www.anchorterminal.com/compare/memory-reference-server-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/mempalace-vs-past-dev.json", "title": "MemPalace vs past.dev", "url": "https://www.anchorterminal.com/compare/mempalace-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/past-dev-vs-supermemory.json", "title": "past.dev vs Supermemory API + MCP", "url": "https://www.anchorterminal.com/compare/past-dev-vs-supermemory" }, { "json": "https://www.anchorterminal.com/compare/past-dev-vs-tencentdb-agent-memory.json", "title": "past.dev vs TencentDB Agent Memory", "url": "https://www.anchorterminal.com/compare/past-dev-vs-tencentdb-agent-memory" }, { "json": "https://www.anchorterminal.com/compare/past-dev-vs-tokenrip.json", "title": "past.dev vs Tokenrip", "url": "https://www.anchorterminal.com/compare/past-dev-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/past-dev-vs-zep.json", "title": "past.dev vs Zep", "url": "https://www.anchorterminal.com/compare/past-dev-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-everos.json", "title": "AI Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-past-dev.json", "title": "AI Memory vs past.dev", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-everos.json", "title": "Context Mode Engine vs EverOS", "url": "https://www.anchorterminal.com/compare/context-mode-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-past-dev.json", "title": "Context Mode Engine vs past.dev", "url": "https://www.anchorterminal.com/compare/context-mode-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-past-dev.json", "title": "Graphicle vs past.dev", "url": "https://www.anchorterminal.com/compare/graphicle-vs-past-dev" } ], "panel": null, "scores": [ { "by": 11, "edge": "everos", "everos": 79, "key": "reliability", "name": "Reliability", "past-dev": 68, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 3, "edge": "everos", "everos": 89, "key": "schema", "name": "Schema \u0026 documentation", "past-dev": 86, "weight": 13 }, { "by": 5, "edge": "past-dev", "everos": 78, "key": "ergonomics", "name": "Agent ergonomics", "past-dev": 83, "weight": 13 }, { "by": 17, "edge": "past-dev", "everos": 47, "key": "security", "name": "Security \u0026 auth", "past-dev": 64, "weight": 14 }, { "by": 0, "edge": "", "everos": 40, "key": "payments", "name": "Payments \u0026 pricing", "past-dev": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 3, "edge": "everos", "everos": 80, "key": "maintenance", "name": "Maintenance \u0026 community", "past-dev": 77, "weight": 7 }, { "by": 5, "edge": "everos", "everos": 71, "key": "transparency", "name": "Transparency \u0026 trust", "past-dev": 66, "weight": 7 } ], "summary": "past.dev and EverOS score within a point of each other on agent readiness, 69.8 (B) and 69.4 (B). EverOS leads on reliability and transparency \u0026 trust. Both do agent memory.", "tasks": null, "tutorials": [], "verdicts": { "everos": "EverOS keeps agent and user memory as Markdown with SQLite and LanceDB indexes, behind a described OpenAPI with typed, retryable errors and an MCP server, under Apache-2.0 at version 1.5.1. The local server has no authentication, EverOS Cloud prices are not published, and the cloud terms forbid automated data extraction.", "past-dev": "A memory API with an OpenAPI file, llms.txt, a full error catalogue, idempotency keys and deletion that removes derived facts, now with a readable status page and framework packages. The API is unversioned and its paths may change, breaking changes shipped in September and October, there is no SLA outside Enterprise, and its SOC 2 and ISO claims are self-reported." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/everos-vs-past-dev", "json": "https://www.anchorterminal.com/compare/everos-vs-past-dev.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/everos-vs-past-dev.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/everos-vs-past-dev.min.md" }, "markdown": "past.dev and EverOS score within a point of each other on agent readiness, 69.8 (B) and 69.4 (B). EverOS leads on reliability and transparency \u0026 trust. Both do agent memory.\n\n- EverOS: grade B, 69.4/100, rank #246 of 1486. Markdown https://www.anchorterminal.com/tools/everos.md · JSON https://www.anchorterminal.com/api/v1/tools/everos.json\n- past.dev: grade B, 69.8/100, rank #223 of 1486. Markdown https://www.anchorterminal.com/tools/past-dev.md · JSON https://www.anchorterminal.com/api/v1/tools/past-dev.json\n- Best memory layers for AI agents: https://www.anchorterminal.com/best/agent-memory/index.md\n- All 353 memory comparisons: https://www.anchorterminal.com/compare/agent-memory/index.md\n\n## Which one, for what\n\n### EverOS (B)\n\nGood for: Self-hosted memory for agents and apps that want Markdown as the source of truth and separate user and agent tracks.\n\nAhead on:\n- Reliability, 79 against 68\n- Transparency \u0026 trust, 71 against 66\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Open source\n\nWatch for: The local HTTP server has no authentication and relies on binding to 127.0.0.1\n\n### past.dev (B)\n\nGood for: Teams building agents over business records (emails, tickets, transcripts, CRM notes) that need the current fact with dated sources and per-user or per-account access.\n\nAhead on:\n- Agent ergonomics, 83 against 78\n- Security \u0026 auth, 64 against 47\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: The changelog says the API is unversioned and its paths may change, and breaking changes shipped in the weeks of 21 September and 19 October\n\n\n## Why the edge\n\n### Security \u0026 auth: past.dev +17\n\n- EverOS (47): Framework reading for software the owner runs. The local server has no authentication and no security scheme in the OpenAPI document, relying on a 127.0.0.1 bind by default (15 of 30). No read-only mode; the cloud purge is two-step (8 of 20). Memories are extracted from conversations and returned into prompts, and everos-mcp tells hosts to save facts unprompted, with no injection guidance found (4 of 15). Structured logs and lock metrics, no audit log (6 of 15). SECURITY.md with a reporting address, five-day acknowledgement, supported versions and a published-advisories section, plus a valid security.txt (14 of 20). Total 47.\n- past.dev (64): Project-scoped keys, revocable and rotatable by minting a replacement, a separate management key that reads no memory, OAuth 2.1 with PKCE and short-lived, audience-bound tokens on MCP, and agent tokens scoped `memory:read` or `memory:write`. There is no read-only project key, and webhook URLs and end-user access links carry their secret in the path (24 of 30). Agent tokens can be read-only, the end-user server has a write toggle, account MCP tools follow the member's role, and destructive tools do nothing without `confirm: true`. A project key can still delete any data in its project (15 of 20). Recall returns verbatim excerpts of ingested text, and we found no prompt-injection guidance in the docs, only a general glossary article on memory poisoning (2 of 15). Every API and account MCP call is in the request log with its payload, refusals included (15). security.txt is valid until 1 May 2027 and the security page names support@past.dev for vulnerability reports. No bug bounty or public advisories. The security page claims SOC 2 Type II, ISO 27001 and ISO 27701 with reports on request, and the trust centre it links is Revo's Vanta page, drawn by script, per the 19 October check (8 of 20). 24 + 15 + 2 + 15 + 8 = 64.\n\n### Reliability: EverOS +11\n\n- EverOS (79): Local-software lines, as a library and server the owner runs. `everos` on PyPI with Python 3.12 or newer stated, plus a Windows guide (20). ci.yml runs on pushes and pull requests and the repository has a tests tree, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 43 open issues and pull requests against 82 commits in 90 days; several outside bug reports, including a silent capture failure in the DSH plugin, have no reply (14 of 25). Keep a Changelog with semantic versioning declared and a 1.0 migration guide (15). Version 1.5.1 (15). Total 79.\n- past.dev (68): Graded on the hosted Memory API with the hosted lines. past.dev/status lists six components (Memory API, ingestion, recall, console, MCP servers, documentation), each with a 90-day uptime figure (100 per cent on 2 November), and a readable incident history. On 19 October the uptime figures read \"no data\" and the history did not load (20; was 10). The history page says records begin on 9 September 2026 and no incident has been reported, so the record covers 54 of the 90 days from 4 August. A readable record shorter than 90 days on a page that has never posted scores 15, as this run settled for short records (15; was 5). Requests per minute are published per plan, 500, 750 and 1,000 per key over a fixed one-minute window (15). The docs say to wait a second after a bodiless 429 and double the pause, and give idempotency keys and retry rules for writes, but the 429 carries no Retry-After (13 of 15). The terms of 27 October 2026 say there is no service level commitment outside Enterprise, and none is published for Enterprise (0). The new terms no longer describe the service as in early access and no page we read labels it beta, but the changelog still says the API is unversioned and its paths may change, read as a young API that may change, 5 as for excaliclaw (5; was 0). 20 + 15 + 15 + 13 + 0 + 5 = 68.\n\n### Agent ergonomics: past.dev +5\n\n- EverOS (78): Read for the API, with seven MCP tools on top. Searches take `top_k` and a method, and responses can be scoped by five ids (20 of 25). Filters nest with AND and OR, and `/get` pages results (18 of 20). Errors carry typed codes and say which are retryable (16 of 20). `add` is queued and returns 202, a busy session refuses deletion with nothing deleted, and the cloud purge needs a nonce confirmed within five minutes (12 of 20). A demo runs with no key and the minimal setup needs one OpenRouter key, with a Python library and the MCP server, one language (12 of 15). Total 78.\n- past.dev (83): Graded on the Memory API, with the MCP servers noted. Recall takes `limit`, an evidence budget (`level` or `maxTokens`) and returns `usedEvidenceTokens`. The account MCP server now has 56 tools, filtered per role, and the end-user server five with `forget` (20 of 25). Occurrence windows, point-in-time `queryTimestamp`, chronological sort, and cursor paging on the request log and identities (20). Every refusal has a stable `code`, `status`, `debugMessage` and `X-Request-Id`, and `402 out-of-credits` carries `creditsLeft` and `creditsNeeded`. The 429 has no body (18 of 20). `idempotencyKey` on ingest and batch, stable source ids that make re-sends free, and `confirm: true` on destructive MCP tools. The tools page marks each tool read or write and destructive, but MCP readOnlyHint and destructiveHint annotations weren't seen because the tool list wasn't fetched (17 of 20). Two required fields on ingest and recall. Since the 19 October check past.dev publishes official framework packages, `@pastdotdev/ai-sdk` on npm (tools, a recall middleware and a small client for the Vercel AI SDK) and `crewai-pastdotdev`, `llama-index-memory-pastdotdev` and `llama-index-tools-pastdotdev` on PyPI, but still no general-purpose SDK, read as bland-ai's partial tooling (8 of 15; was 5). 20 + 20 + 18 + 17 + 8 = 83.\n\n### Transparency \u0026 trust: EverOS +5\n\n- EverOS (71): Apache-2.0 with a NOTICE file (30). Local data stays in the owner's Markdown and indexes. For the cloud, the privacy policy gives no retention periods, the terms and privacy policy word the training exceptions differently, and the privacy contact link points to a miromind.ai address (12 of 30). The README marks `/api/v1` as a legacy alias that may be removed in a future major release, and a 1.0 migration guide exists, with no notice period (14 of 20). No outbound telemetry was found in the source, and the docs don't address it (10 of 20). Total 66.\n- past.dev (66): Closed service under clear, dated terms (27 October 2026) naming Revo Inc., a Delaware corporation doing business as Past Corp. (15). The privacy policy (27 October 2026) says content isn't used for training, deletion removes derived facts, a deleted organisation's backups expire within 7 days, the request log follows the plan's retention and a project and everything derived from it are deleted on request. The security page says model providers process requests with zero retention. The pricing page gives data retention of 365 days on Pay as you go and 3 years on Flex, while the privacy policy says memory is kept while the organisation exists, so the two don't fully agree (20 of 30). The terms promise email before a change removes a capability an account uses, and the changelog says breaking changes are announced before release. Breaking changes shipped in the weeks of 21 September and 19 October, and there is no versioning or dated deprecation policy (8 of 20). AWS is named as host. The privacy policy now puts the sub-processor list and hosting regions in the trust centre at security.revo.ai, which is drawn by script and wasn't readable on 19 October, and the security page gives them on request (5 of 20). 15 + 20 + 8 + 5 = 48.\n\n## Score by category\n\n| Category | Weight | EverOS | past.dev | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 79 | 68 | EverOS +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 86 | EverOS +3 |\n| Agent ergonomics | 13% (16.2 this run) | 78 | 83 | past.dev +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 47 | 64 | past.dev +17 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 80 | 77 | EverOS +3 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 66 | EverOS +5 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **69.4 · B** | **69.8 · B** | |\n\n## Facts side by side\n\n| Fact | EverOS | past.dev |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Evermind AI, Inc. | Revo Inc. (doing business as Past Corp.) |\n| Hosted endpoint | no (local only) | `https://api.past.dev` |\n| Transports | HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary hosted service under past.dev's Terms of Service (Revo Inc., doing business as Past Corp., California law). The benchmark harness and the Claude Code and Codex plugins are MIT-licensed on GitHub under pastdotdev |\n| Tools exposed | 7 | 56 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-22 | 2026-10-19 |\n| Terms last updated | 2026-01-20 | 2026-10-30 |\n| Privacy policy last updated | 2026-01-20 | 2026-10-30 |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 14k stars, 4k PyPI/wk | none |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### EverOS\n\nNo score change since it was listed.\n\n### past.dev\n\n- +6.1 on 2 November 2026: product\n- -0.1 on 30 October 2026: checklist\n\n## Verdicts\n\n**EverOS.** EverOS keeps agent and user memory as Markdown with SQLite and LanceDB indexes, behind a described OpenAPI with typed, retryable errors and an MCP server, under Apache-2.0 at version 1.5.1. The local server has no authentication, EverOS Cloud prices are not published, and the cloud terms forbid automated data extraction.\n\n**past.dev.** A memory API with an OpenAPI file, llms.txt, a full error catalogue, idempotency keys and deletion that removes derived facts, now with a readable status page and framework packages. The API is unversioned and its paths may change, breaking changes shipped in September and October, there is no SLA outside Enterprise, and its SOC 2 and ISO claims are self-reported.\n\n## Before you call either\n\n### EverOS\n\n1. Write new code against `/api/v2`; `/api/v1` is a legacy alias that may go in a future major release\n2. Call `/api/v2/memory/flush` at the end of a session, since `add` is asynchronous and buffers recent messages\n3. Retry on 503 SESSION_BUSY or EXTERNAL_SERVICE_UNAVAILABLE after a pause; nothing was written\n4. Keep `host` at 127.0.0.1 unless something in front adds authentication\n5. Treat recalled memories as untrusted text, since they are extracted from past conversations\n\n### past.dev\n\n1. Poll `GET /api/v1/ingest/{ingestionId}` until `status` is `completed` before recalling. A recall before then misses the derived memory\n2. Send `audience` on every send and re-send of scoped data. A re-send without it makes the data point visible to the whole project\n3. Send an explicit `timestamp` with every `idempotencyKey`, or a retry counts as a different body and returns 409\n4. Don't put `/` in a data point id. Since the week of 19 October ingest refuses it with `400 id-invalid`; use `:` instead\n5. Treat recalled excerpts as untrusted text. They are verbatim from whatever was ingested, and the docs give no injection guidance\n\n## Questions\n\n### Which is better for AI agents, EverOS or past.dev?\n\npast.dev and EverOS score within a point of each other on agent readiness, 69.8 (B) and 69.4 (B). EverOS leads on reliability and transparency \u0026 trust.\n\n### Do EverOS and past.dev need an API key?\n\nEverOS needs no key. past.dev takes an API key or an OAuth sign-in.\n\n### Can an agent call EverOS and past.dev without installing anything?\n\nEverOS runs on your own machine, with no hosted endpoint listed. past.dev has a hosted endpoint at https://api.past.dev.\n\n### Are EverOS and past.dev open source?\n\nEverOS is open source (Apache-2.0). No open-source release is listed for past.dev.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/everos-vs-past-dev.json, and with the fewest tokens: https://www.anchorterminal.com/compare/everos-vs-past-dev.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"everos\", \"b\": \"past-dev\"}`. From a terminal: `anchor compare everos past-dev`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/everos.json and https://www.anchorterminal.com/api/v1/tools/past-dev.json\n\n## Other comparisons with EverOS or past.dev\n\n- [Amazon Bedrock AgentCore Memory vs EverOS](https://www.anchorterminal.com/compare/agentcore-memory-vs-everos.md)\n- [Amazon Bedrock AgentCore Memory vs past.dev](https://www.anchorterminal.com/compare/agentcore-memory-vs-past-dev.md)\n- [Basic Memory vs EverOS](https://www.anchorterminal.com/compare/basic-memory-vs-everos.md)\n- [Basic Memory vs past.dev](https://www.anchorterminal.com/compare/basic-memory-vs-past-dev.md)\n- [claude-mem vs EverOS](https://www.anchorterminal.com/compare/claude-mem-vs-everos.md)\n- [claude-mem vs past.dev](https://www.anchorterminal.com/compare/claude-mem-vs-past-dev.md)\n- [Cognee vs EverOS](https://www.anchorterminal.com/compare/cognee-vs-everos.md)\n- [Cognee vs past.dev](https://www.anchorterminal.com/compare/cognee-vs-past-dev.md)\n- [EverOS vs Agent Platform Memory Bank](https://www.anchorterminal.com/compare/everos-vs-google-memory-bank.md)\n- [EverOS vs Graphicle](https://www.anchorterminal.com/compare/everos-vs-graphicle.md)\n- [EverOS vs Graphiti](https://www.anchorterminal.com/compare/everos-vs-graphiti.md)\n- [EverOS vs Hindsight](https://www.anchorterminal.com/compare/everos-vs-hindsight.md)\n- [EverOS vs Honcho](https://www.anchorterminal.com/compare/everos-vs-honcho.md)\n- [EverOS vs Hy Memory](https://www.anchorterminal.com/compare/everos-vs-hy-memory.md)\n- [EverOS vs LangMem](https://www.anchorterminal.com/compare/everos-vs-langmem.md)\n- [EverOS vs LocalGhost](https://www.anchorterminal.com/compare/everos-vs-localghost.md)\n- [EverOS vs Mem0 Platform + MCP](https://www.anchorterminal.com/compare/everos-vs-mem0.md)\n- [EverOS vs MemMachine](https://www.anchorterminal.com/compare/everos-vs-memmachine.md)\n- [EverOS vs Memori](https://www.anchorterminal.com/compare/everos-vs-memori.md)\n- [EverOS vs Memory (MCP reference server)](https://www.anchorterminal.com/compare/everos-vs-memory-reference-server.md)\n- [EverOS vs MemPalace](https://www.anchorterminal.com/compare/everos-vs-mempalace.md)\n- [EverOS vs Supermemory API + MCP](https://www.anchorterminal.com/compare/everos-vs-supermemory.md)\n- [EverOS vs TencentDB Agent Memory](https://www.anchorterminal.com/compare/everos-vs-tencentdb-agent-memory.md)\n- [EverOS vs Tokenrip](https://www.anchorterminal.com/compare/everos-vs-tokenrip.md)\n- [EverOS vs Zep](https://www.anchorterminal.com/compare/everos-vs-zep.md)\n- [Agent Platform Memory Bank vs past.dev](https://www.anchorterminal.com/compare/google-memory-bank-vs-past-dev.md)\n- [Graphiti vs past.dev](https://www.anchorterminal.com/compare/graphiti-vs-past-dev.md)\n- [Hindsight vs past.dev](https://www.anchorterminal.com/compare/hindsight-vs-past-dev.md)\n- [Honcho vs past.dev](https://www.anchorterminal.com/compare/honcho-vs-past-dev.md)\n- [Hy Memory vs past.dev](https://www.anchorterminal.com/compare/hy-memory-vs-past-dev.md)\n- [LangMem vs past.dev](https://www.anchorterminal.com/compare/langmem-vs-past-dev.md)\n- [LocalGhost vs past.dev](https://www.anchorterminal.com/compare/localghost-vs-past-dev.md)\n- [Mem0 Platform + MCP vs past.dev](https://www.anchorterminal.com/compare/mem0-vs-past-dev.md)\n- [MemMachine vs past.dev](https://www.anchorterminal.com/compare/memmachine-vs-past-dev.md)\n- [Memori vs past.dev](https://www.anchorterminal.com/compare/memori-vs-past-dev.md)\n- [Memory (MCP reference server) vs past.dev](https://www.anchorterminal.com/compare/memory-reference-server-vs-past-dev.md)\n- [MemPalace vs past.dev](https://www.anchorterminal.com/compare/mempalace-vs-past-dev.md)\n- [past.dev vs Supermemory API + MCP](https://www.anchorterminal.com/compare/past-dev-vs-supermemory.md)\n- [past.dev vs TencentDB Agent Memory](https://www.anchorterminal.com/compare/past-dev-vs-tencentdb-agent-memory.md)\n- [past.dev vs Tokenrip](https://www.anchorterminal.com/compare/past-dev-vs-tokenrip.md)\n- [past.dev vs Zep](https://www.anchorterminal.com/compare/past-dev-vs-zep.md)\n- [AI Memory vs EverOS](https://www.anchorterminal.com/compare/ai-memory-vs-everos.md)\n- [AI Memory vs past.dev](https://www.anchorterminal.com/compare/ai-memory-vs-past-dev.md)\n- [Context Mode Engine vs EverOS](https://www.anchorterminal.com/compare/context-mode-vs-everos.md)\n- [Context Mode Engine vs past.dev](https://www.anchorterminal.com/compare/context-mode-vs-past-dev.md)\n- [Graphicle vs past.dev](https://www.anchorterminal.com/compare/graphicle-vs-past-dev.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "EverOS vs past.dev", "url": "" } ], "description": "past.dev and EverOS score within a point of each other for agent memory, 69.8 and 69.4 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "EverOS B 69.4", "past.dev B 69.8", "scores" ], "h1": "EverOS vs past.dev", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/everos-vs-past-dev", "published": "2026-10-01", "section": "tools", "title": "EverOS vs past.dev for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/everos-vs-past-dev" }, "tokens": { "markdown": 4950, "slim": 2630 }, "version": 1 }