{ "data": { "a": { "slug": "everos", "name": "EverOS", "vendor": "Evermind AI, Inc.", "vendorUrl": "https://evermind.ai", "kind": "http-api", "category": "agent-memory", "summary": "EverOS, formerly EverMemOS, is EverMind's open-source memory runtime for agents. It stores conversations, files and agent trajectories as Markdown with SQLite and LanceDB indexes, behind a local HTTP API and MCP server, with a managed EverOS Cloud.", "url": "https://www.anchorterminal.com/tools/everos", "markdownUrl": "https://www.anchorterminal.com/tools/everos.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/everos.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/everos.json", "dns": "everos.grade.anchorterminal.com", "repo": "https://github.com/EverMind-AI/EverOS", "license": "Apache-2.0", "transports": [ "http", "stdio" ], "packages": [ { "registry": "pypi", "name": "everos" }, { "registry": "pypi", "name": "everos-mcp" } ], "auth": "none", "authNotes": "The self-hosted server has no authentication and binds to 127.0.0.1:8000 by default. The owner supplies LLM and embedding provider keys in ~/.everos/everos.toml. EverOS Cloud uses a bearer API key from the console at everos.evermind.ai, and its hosted MCP connector signs in with an EverOS account.", "pricing": "freemium", "pricingNotes": "Free under Apache-2.0 to run locally, with LLM and embedding costs paid to the chosen provider. EverOS Cloud has a console and API keys, but no plan or price was found on evermind.ai or docs.evermind.ai.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the OpenAPI document, llms.txt or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": 7, "popularity": { "githubStars": 13839, "npmWeekly": null, "pypiWeekly": 4033, "asOf": "2026-11-06" }, "docsUrl": "https://docs.evermind.ai", "llmsTxt": "https://docs.evermind.ai/llms.txt", "openapi": "https://github.com/EverMind-AI/EverOS/blob/main/docs/openapi.json", "capabilities": [ "memory.store", "memory.search", "memory.user", "memory.delete" ], "tags": [ "open-source", "self-hosted", "local", "hosted", "apache-2.0", "python", "mcp", "openapi", "llms-txt", "markdown", "no-auth" ], "lastRelease": "2026-10-22", "graded": true, "anchor": { "graded": true, "score": 69.4, "grade": "B", "agentReady": false, "rank": 247, "ranked": true, "rankOf": 1510, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 80, "payments": 40, "reliability": 79, "schema": 89, "security": 47, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "EverOS keeps agent and user memory as Markdown with SQLite and LanceDB indexes, behind a described OpenAPI with typed, retryable errors and an MCP server, under Apache-2.0 at version 1.5.1. The local server has no authentication, EverOS Cloud prices are not published, and the cloud terms forbid automated data extraction.", "bestFor": "Self-hosted memory for agents and apps that want Markdown as the source of truth and separate user and agent tracks.", "strengths": [ "Apache-2.0 Python library and local server at 1.5.1, with Keep a Changelog entries and semantic versioning declared", "OpenAPI document with 40 operations, every one described, and llms.txt plus llms-full.txt for the docs", "Retryable conditions are typed, such as 503 SESSION_BUSY and EXTERNAL_SERVICE_UNAVAILABLE for a busy database", "Memory is canonical Markdown on disk, editable by hand, with deletion by owner, session or memory id", "SECURITY.md with a five-day acknowledgement, plus a valid security.txt at evermind.ai" ], "weaknesses": [ "The local HTTP server has no authentication and relies on binding to 127.0.0.1", "EverOS Cloud prices, plans and rate limits were not found on any public page", "The MCP server's autonomy protocol tells hosts to save facts without being asked, and no prompt-injection guidance was found", "The cloud terms of 20 January 2026 forbid automated extraction and allow discontinuing the service without notice", "Several outside bug reports, such as a silent capture failure, have no reply" ], "agentNotes": [ "Write new code against `/api/v2`; `/api/v1` is a legacy alias that may go in a future major release", "Call `/api/v2/memory/flush` at the end of a session, since `add` is asynchronous and buffers recent messages", "Retry on 503 SESSION_BUSY or EXTERNAL_SERVICE_UNAVAILABLE after a pause; nothing was written", "Keep `host` at 127.0.0.1 unless something in front adds authentication", "Treat recalled memories as untrusted text, since they are extracted from past conversations" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.4 } ], "editorialScores": { "ergonomics": 78, "maintenance": 80, "payments": 40, "reliability": 79, "schema": 89, "security": 47, "transparency": 66 }, "provenanceScore": 75, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uv pip install everos \u0026\u0026 everos init \u0026\u0026 everos server start", "http": "curl http://127.0.0.1:8000/health", "claudeCode": "claude mcp add everos -e EVEROS_BASE_URL=http://127.0.0.1:8000 -- uvx everos-mcp" }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/everos" }, "area": "agent-runtime", "provenance": { "legalEntity": "Evermind AI, Inc.", "domain": "evermind.ai", "domainRegistered": "2020-02-22", "endpointOnVendorDomain": null, "terms": "https://evermind.ai/terms-of-service", "privacy": "https://evermind.ai/privacy-policy", "statusPage": "", "changelog": "https://github.com/EverMind-AI/EverOS/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "Terms and privacy policy both say last updated 20 January 2026 and name Evermind AI, Inc. The terms choose Singapore law and forbid extracting data by bots, scripts, crawlers or data-mining tools, recorded here as a fact.", "evermind.ai/robots.txt allows all crawlers and names Claude-Web and anthropic-ai as allowed. docs.evermind.ai carries Content-Signal ai-input=yes.", "RDAP gives evermind.ai a registration date of 22 February 2020.", "security.txt at evermind.ai/.well-known/ gives contact@evermind.ai and a policy URL, expiring 28 February 2027.", "The about page is drawn by script and returned no readable text." ], "score": 75 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/everos.json", "live": { "slug": "everos", "versions": [ { "registry": "github", "name": "EverMind-AI/EverOS", "version": "v1.5.1", "released": "2026-10-22", "seenAt": "2026-11-06T23:24:44.540703115Z" }, { "registry": "pypi", "name": "everos", "version": "1.5.1", "released": "2026-10-22", "seenAt": "2026-11-06T23:24:41.488069905Z" }, { "registry": "pypi", "name": "everos-mcp", "version": "0.1.1", "released": "2026-10-15", "seenAt": "2026-11-06T23:24:42.65503941Z" } ], "githubStars": 13840, "pypiWeekly": 4033, "securityTxt": { "url": "https://evermind.ai/.well-known/security.txt", "state": "valid", "expires": "2027-02-28T00:00:00Z", "checkedAt": "2026-11-07T16:01:32.419431813Z" }, "llmsTxt": { "url": "https://docs.evermind.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:26.933711899Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/EverMind-AI/EverOS/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:19.185692468Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "40ab92cf4d99" }, { "url": "https://evermind.ai/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:09:24.819286526Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dcd843ca72fe" }, { "url": "https://evermind.ai/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:09:28.72898661Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "009377ab61a3" } ], "updatedAt": "2026-11-07T16:01:32.419431813Z" } }, "answer": "EverOS scores 69.4 (B) on agent readiness against Tokenrip's 60.3 (C), and leads in 3 of 7 scored categories. Tokenrip leads on security \u0026 auth and payments \u0026 pricing.", "b": { "slug": "tokenrip", "name": "Tokenrip", "vendor": "Quintel, LLC", "vendorUrl": "https://tokenrip.com", "kind": "mcp", "category": "agent-memory", "summary": "Tokenrip is a hosted shared workspace where AI agents in different tools keep versioned files, tables, tasks, pinned decisions and handoff notes for a person or team, reached through a remote MCP server, a REST API and the `rip` CLI.", "url": "https://www.anchorterminal.com/tools/tokenrip", "markdownUrl": "https://www.anchorterminal.com/tools/tokenrip.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/tokenrip.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/tokenrip.json", "dns": "tokenrip.grade.anchorterminal.com", "repo": "https://github.com/tokenrip/cli", "license": "Proprietary hosted service under Tokenrip's terms of service (Quintel, LLC, Texas law). The `rip` CLI and library `@tokenrip/cli` is MIT-licensed on GitHub", "transports": [ "streamable-http", "http" ], "remoteUrl": "https://api.tokenrip.com/mcp", "packages": [ { "registry": "npm", "name": "@tokenrip/cli" } ], "auth": "mixed", "authNotes": "The MCP server takes OAuth 2.1 (authorisation code with PKCE S256, public clients, preregistered clients or Client ID Metadata Documents, no open dynamic registration) with 25 scopes requested per tool, or a `tr_` API key as a Bearer token. REST takes only `tr_` keys. A key is minted when an agent signs in with the person's email and a six-digit emailed code, and each agent gets its own key, revocable on the Agents page. Keys have full access to the account. `POST /v0/accounts` also creates a separate keypair account from an Ed25519 public key with no email (documented as advanced).", "pricing": "freemium", "pricingNotes": "Priced per team member, with no charge per agent or guest. Free is $0 for one person with 2,500 actions a month and 1 GB. Pro is $20 per member a month (each member adds 25,000 actions and 5 GB) and Power $60 per member a month (100,000 actions and 20 GB), billed monthly plus tax. Enterprise is by contact. Reading and searching don't count as actions; storage counts every version kept and the trash. Only a person can start or end a plan in Billing (https://tokenrip.com/pricing, https://tokenrip.com/llms.txt).", "priceSummary": "$20 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI file, llms.txt, the setup guide or the MCP tool reference. Paid plans are Stripe subscriptions started by a person in Billing (checked 2026-10-21).", "endpoints": [] }, "toolCount": 98, "popularity": { "githubStars": 5, "npmWeekly": 401, "pypiWeekly": null, "asOf": "2026-10-21" }, "docsUrl": "https://docs.tokenrip.com", "llmsTxt": "https://tokenrip.com/llms.txt", "openapi": "https://api.tokenrip.com/v0/openapi.json", "registryName": "io.github.silostack/tokenrip", "capabilities": [ "memory.store", "memory.search", "agent.handoff", "memory.delete", "storage.share", "tasks.create", "tasks.update", "hitl.approve" ], "tags": [ "official", "hosted", "closed-source", "freemium", "free-tier", "no-card", "mcp", "oauth", "llms-txt", "openapi", "typescript", "new" ], "lastRelease": "2026-11-02", "graded": true, "anchor": { "graded": true, "score": 60.3, "grade": "C", "agentReady": false, "rank": 657, "ranked": true, "rankOf": 1510, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 75, "payments": 50, "reliability": 57, "schema": 93, "security": 71, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -9, "negativeNotes": [ "26 October 2026, -3 (a published behaviour changed for existing clients, announced only when it took effect). Adding someone to a workspace now makes them a guest, and asking for internal access on an add is refused with `INTERNAL_NEEDS_TEAM`; on 27 October saving a file began replacing it, keeping earlier versions only when the history setting asks. Both appear only as changelog entries dated the day the work finished (https://tokenrip.com/changelog).", "29 October 2026, -3 (breaking change in a patch release without notice). `@tokenrip/cli` 2.6.12 removed `rip task decide --decline`, `--skip`, `--reason` and `--edited-draft` and `--kind` on task commands, which now refuse with the replacement named (https://github.com/tokenrip/cli/blob/main/src/cli.ts).", "31 October 2026, -3 (released fix of the listing's own described flaw with no advisory). The changelog says CLI 2.6.15 makes the file that holds the key readable only by its owner, including existing files; the repository's 2.6.16 commit tightens config and identity files from group- and world-readable modes. OSV lists nothing for `@tokenrip/cli` (https://tokenrip.com/changelog)." ], "verdict": "A shared workspace that agents in different tools reach over MCP, REST or a CLI, with scoped OAuth, annotated tools, a public OpenAPI file and an approval step for outside actions. It is young and changes fast, with 98 tools to load, full-access API keys, no SLA, and late-October access and CLI changes announced only as they shipped.", "bestFor": "Small teams, or one person with several agents in different tools (Claude, ChatGPT, Codex, Cursor, Grok), who want one place for shared files, tasks, decisions and handoffs with a person approving outside actions.", "strengths": [ "Public OpenAPI 3.1 file with 144 operations, plus llms.txt and a Markdown copy of every docs page", "OAuth 2.1 with PKCE and 25 per-tool scopes; each agent has its own revocable key", "Every tool classed Read, Write or Sensitive from its MCP annotations", "Errors carry a code, a recovery message and a `retry` of never, safe or unknown, and 429s carry Retry-After", "Free plan for one person with 2,500 actions a month and no card" ], "weaknesses": [ "98 tool definitions with no toolsets or dynamic loading found", "`tr_` API keys have full access to the account, with no read-only key", "Workspace access and CLI option changes in late October 2026 were announced only as they shipped", "No SLA, no published rate-limit numbers, and the status page started on 2 November 2026", "No CI or tests in the CLI repository" ], "agentNotes": [ "Call `workspace_list`, then `workspace_load` with the full workspace id at the start of every run.", "Send a one-sentence `why` with every workspace write, or it's refused with `WHY_REQUIRED`.", "Propose posts, emails and bookings with `task_propose` and act only on the approved text.", "Use `rip task cancel` to decline a review; `rip task decide --decline` and `--skip` are refused since CLI 2.6.12.", "Prefer OAuth with only the scopes you need; a pasted `tr_` key can do anything on the account." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.3 } ], "editorialScores": { "ergonomics": 70, "maintenance": 75, "payments": 50, "reliability": 57, "schema": 93, "security": 71, "transparency": 59 }, "provenanceScore": 83, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @tokenrip/cli", "claudeCode": "claude mcp add --transport http tokenrip https://api.tokenrip.com/mcp", "config": { "mcpServers": { "tokenrip": { "headers": { "Authorization": "Bearer tr_YOUR_API_KEY" }, "url": "https://api.tokenrip.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/tokenrip" }, "area": "agent-runtime", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 20, "note": "per team member, adds 25,000 actions a month and 5 GB, plus tax" }, { "item": "Power plan", "unit": "month", "usd": 60, "note": "per team member, adds 100,000 actions a month and 20 GB, plus tax" } ], "provenance": { "legalEntity": "Quintel, LLC", "domain": "tokenrip.com", "domainRegistered": "2026-03-25", "domainNote": "RDAP for tokenrip.com gives a registration date of 2026-03-25 through NameCheap, Inc. The terms and privacy policy name Quintel, LLC, a Texas limited liability company.", "endpointOnVendorDomain": true, "terms": "https://tokenrip.com/terms", "privacy": "https://tokenrip.com/privacy", "statusPage": "https://status.tokenrip.com", "changelog": "https://tokenrip.com/changelog", "securityTxt": "valid", "checked": "2026-11-04", "notes": [ "The terms of service (last updated 16 October 2026) are between the user and Quintel, LLC under Texas law. They say the service is supplied as is, with no uptime promise, and that terms changes are shown by the date at the top.", "Since 31 October 2026 tokenrip.com/.well-known/security.txt names security@tokenrip.com, a policy at /security and an Expires date of 3 May 2027. The changelog at /changelog (last updated 3 November) and status.tokenrip.com (incident.io, opened 2 November) are new since 21 October; /status still answers 404.", "The API (api.tokenrip.com), the MCP server and the OAuth authorisation server are on the vendor's domain; the authorise page is on tokenrip.com. robots.txt on tokenrip.com allows all agents, and docs.tokenrip.com disallows only /cdn-cgi/ and /_next/." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/tokenrip.json", "live": { "slug": "tokenrip", "probe": { "target": "https://api.tokenrip.com/mcp", "method": "mcp-initialize", "lastAt": "2026-11-07T19:22:40.919162165Z", "lastOk": true, "lastStatus": 401, "lastMs": 170, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 99.98, "p50ms24h": 146, "p95ms24h": 347, "samples24h": 238, "samples30d": 4143, "days": [ { "date": "2026-10-21", "probes": 25, "ok": 25 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 248 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.tokenrip.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:23:50.264396818Z" }, "versions": [ { "registry": "mcp-registry", "name": "io.github.silostack/tokenrip", "version": "1.1.0", "seenAt": "2026-10-23T12:26:08.951467141Z" }, { "registry": "npm", "name": "@tokenrip/cli", "version": "2.6.19", "seenAt": "2026-11-07T00:12:26.906886401Z" } ], "githubStars": 6, "npmWeekly": 1230, "securityTxt": { "url": "https://tokenrip.com/.well-known/security.txt", "state": "valid", "expires": "2027-05-06T16:00:46.275Z", "checkedAt": "2026-11-07T16:00:46.16451703Z" }, "llmsTxt": { "url": "https://tokenrip.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:10.417742935Z" }, "domain": { "domain": "tokenrip.com", "registered": "2026-03-25", "source": "https://rdap.verisign.com/com/v1/domain/tokenrip.com", "checkedAt": "2026-11-01T14:24:19.897295791Z" }, "pages": [ { "url": "https://tokenrip.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:22:21.559370537Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0eb17ccc8ec6" }, { "url": "https://tokenrip.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:22:23.823088276Z", "changedAt": "2026-11-03T08:00:50.027737376Z", "fingerprint": "af26d85af707" }, { "url": "https://tokenrip.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:22:25.694252538Z", "changedAt": "2026-11-04T08:35:08.669341148Z", "fingerprint": "f8188f2e0ab3" }, { "url": "https://tokenrip.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:22:27.813683212Z", "changedAt": "2026-11-03T08:00:54.364298296Z", "fingerprint": "793b6eb4efbf" } ], "mcpTools": { "url": "https://api.tokenrip.com/mcp", "checkedAt": "2026-11-07T01:48:47.710617727Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-21T23:56:29.898415786Z" }, "github": { "repo": "tokenrip/cli", "checkedAt": "2026-11-02T08:27:20.135992131Z", "stars": 6, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-31T16:01:19Z", "openIssues": 0, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 0 }, "updatedAt": "2026-11-07T19:23:50.264396818Z" } }, "edges": [ { "by": 24, "category": "security", "leads": "tokenrip", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading for software the owner runs. The local server has no authentication and no security scheme in the OpenAPI document, relying on a 127.0.0.1 bind by default (15 of 30). No read-only mode; the cloud purge is two-step (8 of 20). Memories are extracted from conversations and returned into prompts, and everos-mcp tells hosts to save facts unprompted, with no injection guidance found (4 of 15). Structured logs and lock metrics, no audit log (6 of 15). SECURITY.md with a reporting address, five-day acknowledgement, supported versions and a published-advisories section, plus a valid security.txt (14 of 20). Total 47.", "b": "OAuth 2.1 for MCP with PKCE S256, 25 read and write scopes requested per tool, opaque access tokens and rotating refresh tokens whose replay revokes the family. Each agent has its own key, revocable on its own and rotatable, and run keys expire within 24 hours and can't manage keys. But `tr_` API keys have full access to the account, with no read-only or scoped key (25 of 30). Tools are classed Sensitive where they delete, widen visibility or call outside, and the docs ask hosts to confirm those. Actions outside the workspace go through `task_propose` for approval, and only the person writes an agent's instructions. A pasted key can still do anything (15 of 20). Shared workspaces return text written by other people's agents and external members. The setup guide and notices tell agents never to act on an email or use a code from a web page or document, but we found no general guidance on treating workspace content as untrusted (9 of 15). Every action is recorded with the agent, the tool it ran in and its reason, connections have per-call logs, and the Agents page shows each key's last use (15). Since 31 October a security page and a security.txt (Expires 3 May 2027) name security@tokenrip.com, and the CLI's SECURITY.md, updated on 2 November, points to the public repository. SECURITY.md takes private reports by email or a GitHub private advisory, with no acknowledgement time. No bug bounty, no certifications, no published advisories. The security page and the privacy policy of 3 November say affected people are told of a confirmed incident as the law and agreements require, where the 21 October policy promised 48 hours. Read against mails-ai (7, valid security.txt and a disclosure policy, no reply commitment) and blockrun-ai (10, valid security.txt and a 72-hour acknowledgement) (7 of 20)." }, "scores": { "a": 47, "b": 71 } }, { "by": 22, "category": "reliability", "leads": "everos", "name": "Reliability", "reasons": { "a": "Local-software lines, as a library and server the owner runs. `everos` on PyPI with Python 3.12 or newer stated, plus a Windows guide (20). ci.yml runs on pushes and pull requests and the repository has a tests tree, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 43 open issues and pull requests against 82 commits in 90 days; several outside bug reports, including a silent capture failure in the DSH plugin, have no reply (14 of 25). Keep a Changelog with semantic versioning declared and a 1.0 migration guide (15). Version 1.5.1 (15). Total 79.", "b": "Graded with the hosted lines, on the remote MCP server and REST API. status.tokenrip.com, an incident.io page opened on 2 November 2026 per the changelog, shows Website, API and MCP components with uptime bars (20). Its feed lists no incident, and two days of history is a short record (15). Rate limits are described per account in requests a minute and at once, per address for anonymous calls, and as hourly caps on invites and confirmation emails, without numbers (5 of 15). Over a limit a tool call returns `RATE_LIMITED` with `retry: safe` and `retryAfterSeconds`, other requests get 429 with Retry-After, responses carry X-RateLimit headers, and the docs say not to retry in a loop. Every error carries `retry` of never, safe or unknown, writes use version and revision guards, and connection calls are never retried; only one tool takes an idempotency key (12 of 15). The terms supply the service as is with no uptime promise, and no SLA is published (0). Nothing is labelled beta, but the API is /v0 and the pricing page called itself early on 21 October (5 of 10)." }, "scores": { "a": 79, "b": 57 } }, { "by": 10, "category": "payments", "leads": "tokenrip", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, with the price lines read for EverOS Cloud. No x402, MPP or L402 (0 of 40). No cloud price or plan found on evermind.ai, its FAQ, terms or docs (0). The open-source runtime is free with no card (20). An agent can install it from PyPI and run it with no account (20). Total 40.", "b": "No x402, MPP or L402 anywhere in the docs or the OpenAPI file (0 of 40). Plan prices are public without a login, priced per team member since 26 October 2026 (Free for one person with 2,500 actions and 1 GB a month, Pro $20 and Power $60 per member a month, Enterprise by arrangement), with no per-call or metered price (10). The free plan needs an email and a code, with no card (20). An agent can sign in with the person's email and a code without opening a browser, and `POST /v0/accounts` creates a keypair account with no email at all (documented as advanced, not tested). Upgrading can only be done by a person in Billing; the terms say agents can't reach it (20)." }, "scores": { "a": 40, "b": 50 } }, { "by": 8, "category": "ergonomics", "leads": "everos", "name": "Agent ergonomics", "reasons": { "a": "Read for the API, with seven MCP tools on top. Searches take `top_k` and a method, and responses can be scoped by five ids (20 of 25). Filters nest with AND and OR, and `/get` pages results (18 of 20). Errors carry typed codes and say which are retryable (16 of 20). `add` is queued and returns 202, a busy session refuses deletion with nothing deleted, and the cloud purge needs a nonce confirmed within five minutes (12 of 20). A demo runs with no key and the minimal setup needs one OpenRouter key, with a Python library and the MCP server, one language (12 of 15). Total 78.", "b": "Graded on the MCP server. 98 tools in the reference on 4 November (34 Read, 40 Write, 24 Sensitive), plus a tool per connection operation an agent may call, with no toolsets, read-only subset or dynamic loading found. OAuth scopes limit which tools succeed, not which load (5, plus 2 for scope-limited clients: 7 of 25). Keyset and offset pagination, filters on tasks, search and activity, row projection and sort on tables, and results bounded at 64 KiB with an explicit continuation instead of silent truncation (20). Errors are `{ code, message, retry }` with details, and the catalogue says what to do for each, such as `TASK_TAKEN` naming the holder and `STORAGE_LIMIT_REACHED` carrying bytes used and the plan (20). Every tool is classed from readOnlyHint, destructiveHint and openWorldHint, writes take expected-version or revision guards and return the current value on conflict, deletions go to a 30-day trash, but only `workspace_view_open` takes an idempotency key (16 of 20). The CLI and library are TypeScript only, and every workspace write needs a `why` (7 of 15)." }, "scores": { "a": 78, "b": 70 } }, { "by": 5, "category": "maintenance", "leads": "everos", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.5.1 on 22 October 2026 (30). Five tagged releases in 90 days and 12 PyPI uploads (20). Maintainer replies on some issues, others from outside users unanswered for weeks (12 of 25). Python library and the everos-mcp package, not in the official MCP registry (10 of 15). uv.lock, CI, docs and release workflows (8 of 10). Total 80.", "b": "Read for a closed service with an open-source CLI. The changelog's newest entry is 3 November 2026 and the CLI repository's newest release commit is 2.6.16 on 2 November (30). 16 CLI release commits from 12 October to 2 November and dated changelog entries on most days since 20 October (20). No issues or pull requests have ever been opened on the repository. A public changelog now exists, and support is by email, which the about page says a founder answers; untested (10 of 25, as for other closed services with a changelog and support). Listed in the official MCP registry as `io.github.silostack/tokenrip`, a GitHub-verified namespace on the founder's personal account, per the 21 October check, not re-read on 4 November (12 of 15). The repository has no CI workflows and no tests. Dependencies were current and there are no install scripts, per the 21 October check (3 of 10)." }, "scores": { "a": 80, "b": 75 } } ], "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "Evermind AI, Inc.", "b": "Quintel, LLC", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.tokenrip.com/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "Streamable HTTP, HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary hosted service under Tokenrip's terms of service (Quintel, LLC, Texas law). The `rip` CLI and library `@tokenrip/cli` is MIT-licensed on GitHub", "name": "Licence" }, { "a": "7", "b": "98", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.silostack/tokenrip", "name": "MCP registry" }, { "a": "2026-10-22", "b": "2026-11-02", "name": "Last release" }, { "a": "2026-01-20", "b": "2026-10-16", "name": "Terms last updated" }, { "a": "2026-01-20", "b": "2026-10-16", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "14k stars, 4k PyPI/wk", "b": "5 stars, 401 npm/wk", "name": "Popularity" }, { "a": "none", "b": "3.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "EverOS scores 69.4 (B) on agent readiness against Tokenrip's 60.3 (C), and leads in 3 of 7 scored categories. Tokenrip leads on security \u0026 auth and payments \u0026 pricing.", "question": "Which is better for AI agents, EverOS or Tokenrip?" }, { "answer": "EverOS needs no key. Tokenrip takes an API key or an OAuth sign-in.", "question": "Do EverOS and Tokenrip need an API key?" }, { "answer": "EverOS runs on your own machine, with no hosted endpoint listed. Tokenrip has a hosted endpoint at https://api.tokenrip.com/mcp.", "question": "Can an agent call EverOS and Tokenrip without installing anything?" }, { "answer": "EverOS is open source (Apache-2.0). No open-source release is listed for Tokenrip.", "question": "Are EverOS and Tokenrip open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 79 against 57", "Agent ergonomics, 78 against 70", "Maintenance \u0026 community, 80 against 75" ], "also": [ "No key needed to call it", "Runs on your own machine", "Open source", "No incidents deducted, where Tokenrip loses 9 points for them" ], "goodFor": "Self-hosted memory for agents and apps that want Markdown as the source of truth and separate user and agent tracks.", "slug": "everos", "watchFor": "The local HTTP server has no authentication and relies on binding to 127.0.0.1" }, { "aheadOn": [ "Security \u0026 auth, 71 against 47", "Payments \u0026 pricing, 50 against 40" ], "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "Small teams, or one person with several agents in different tools (Claude, ChatGPT, Codex, Cursor, Grok), who want one place for shared files, tasks, decisions and handoffs with a person approving outside actions.", "slug": "tokenrip", "watchFor": "98 tool definitions with no toolsets or dynamic loading found" } ], "history": { "everos": null, "tokenrip": [ { "causes": [ "security", "product" ], "date": "2026-11-04", "delta": 0.6, "from": 59.7, "fromGrade": "C", "to": 60.3, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-30", "delta": -0.2, "from": 59.9, "fromGrade": "C", "to": 59.7, "toGrade": "C" }, { "causes": [ "evidence" ], "date": "2026-10-28", "delta": 0.2, "from": 59.7, "fromGrade": "C", "to": 59.9, "toGrade": "C" } ] }, "job": { "capability": "memory.store", "name": "Agent memory" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-everos.json", "title": "Amazon Bedrock AgentCore Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-tokenrip.json", "title": "Amazon Bedrock AgentCore Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-everos.json", "title": "Basic Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip.json", "title": "Basic Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-everos.json", "title": "claude-mem vs EverOS", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-tokenrip.json", "title": "claude-mem vs Tokenrip", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-everos.json", "title": "Cognee vs EverOS", "url": "https://www.anchorterminal.com/compare/cognee-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-tokenrip.json", "title": "Cognee vs Tokenrip", "url": "https://www.anchorterminal.com/compare/cognee-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-google-memory-bank.json", "title": "EverOS vs Agent Platform Memory Bank", "url": "https://www.anchorterminal.com/compare/everos-vs-google-memory-bank" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-graphicle.json", "title": "EverOS vs Graphicle", "url": "https://www.anchorterminal.com/compare/everos-vs-graphicle" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-graphiti.json", "title": "EverOS vs Graphiti", "url": "https://www.anchorterminal.com/compare/everos-vs-graphiti" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-hindsight.json", "title": "EverOS vs Hindsight", "url": "https://www.anchorterminal.com/compare/everos-vs-hindsight" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-honcho.json", "title": "EverOS vs Honcho", "url": "https://www.anchorterminal.com/compare/everos-vs-honcho" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-hy-memory.json", "title": "EverOS vs Hy Memory", "url": "https://www.anchorterminal.com/compare/everos-vs-hy-memory" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-langmem.json", "title": "EverOS vs LangMem", "url": "https://www.anchorterminal.com/compare/everos-vs-langmem" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-localghost.json", "title": "EverOS vs LocalGhost", "url": "https://www.anchorterminal.com/compare/everos-vs-localghost" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-mem0.json", "title": "EverOS vs Mem0 Platform + MCP", "url": "https://www.anchorterminal.com/compare/everos-vs-mem0" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memmachine.json", "title": "EverOS vs MemMachine", "url": "https://www.anchorterminal.com/compare/everos-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memori.json", "title": "EverOS vs Memori", "url": "https://www.anchorterminal.com/compare/everos-vs-memori" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memory-reference-server.json", "title": "EverOS vs Memory (MCP reference server)", "url": "https://www.anchorterminal.com/compare/everos-vs-memory-reference-server" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-mempalace.json", "title": "EverOS vs MemPalace", "url": "https://www.anchorterminal.com/compare/everos-vs-mempalace" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-past-dev.json", "title": "EverOS vs past.dev", "url": "https://www.anchorterminal.com/compare/everos-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-supermemory.json", "title": "EverOS vs Supermemory API + MCP", "url": "https://www.anchorterminal.com/compare/everos-vs-supermemory" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-tencentdb-agent-memory.json", "title": "EverOS vs TencentDB Agent Memory", "url": "https://www.anchorterminal.com/compare/everos-vs-tencentdb-agent-memory" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-zep.json", "title": "EverOS vs Zep", "url": "https://www.anchorterminal.com/compare/everos-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/google-memory-bank-vs-tokenrip.json", "title": "Agent Platform Memory Bank vs Tokenrip", "url": "https://www.anchorterminal.com/compare/google-memory-bank-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/graphiti-vs-tokenrip.json", "title": "Graphiti vs Tokenrip", "url": "https://www.anchorterminal.com/compare/graphiti-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/hindsight-vs-tokenrip.json", "title": "Hindsight vs Tokenrip", "url": "https://www.anchorterminal.com/compare/hindsight-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/honcho-vs-tokenrip.json", "title": "Honcho vs Tokenrip", "url": "https://www.anchorterminal.com/compare/honcho-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/hy-memory-vs-tokenrip.json", "title": "Hy Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/hy-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/langmem-vs-tokenrip.json", "title": "LangMem vs Tokenrip", "url": "https://www.anchorterminal.com/compare/langmem-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/localghost-vs-tokenrip.json", "title": "LocalGhost vs Tokenrip", "url": "https://www.anchorterminal.com/compare/localghost-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/mem0-vs-tokenrip.json", "title": "Mem0 Platform + MCP vs Tokenrip", "url": "https://www.anchorterminal.com/compare/mem0-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.json", "title": "MemMachine vs Tokenrip", "url": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/memori-vs-tokenrip.json", "title": "Memori vs Tokenrip", "url": "https://www.anchorterminal.com/compare/memori-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/memory-reference-server-vs-tokenrip.json", "title": "Memory (MCP reference server) vs Tokenrip", "url": "https://www.anchorterminal.com/compare/memory-reference-server-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/mempalace-vs-tokenrip.json", "title": "MemPalace vs Tokenrip", "url": "https://www.anchorterminal.com/compare/mempalace-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/past-dev-vs-tokenrip.json", "title": "past.dev vs Tokenrip", "url": "https://www.anchorterminal.com/compare/past-dev-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/supermemory-vs-tokenrip.json", "title": "Supermemory API + MCP vs Tokenrip", "url": "https://www.anchorterminal.com/compare/supermemory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/tencentdb-agent-memory-vs-tokenrip.json", "title": "TencentDB Agent Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/tencentdb-agent-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/tokenrip-vs-zep.json", "title": "Tokenrip vs Zep", "url": "https://www.anchorterminal.com/compare/tokenrip-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-everos.json", "title": "AI Memory vs EverOS", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-tokenrip.json", "title": "AI Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-everos.json", "title": "Context Mode Engine vs EverOS", "url": "https://www.anchorterminal.com/compare/context-mode-vs-everos" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-tokenrip.json", "title": "Context Mode Engine vs Tokenrip", "url": "https://www.anchorterminal.com/compare/context-mode-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-tokenrip.json", "title": "Graphicle vs Tokenrip", "url": "https://www.anchorterminal.com/compare/graphicle-vs-tokenrip" } ], "panel": null, "scores": [ { "by": 22, "edge": "everos", "everos": 79, "key": "reliability", "name": "Reliability", "tokenrip": 57, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "tokenrip", "everos": 89, "key": "schema", "name": "Schema \u0026 documentation", "tokenrip": 93, "weight": 13 }, { "by": 8, "edge": "everos", "everos": 78, "key": "ergonomics", "name": "Agent ergonomics", "tokenrip": 70, "weight": 13 }, { "by": 24, "edge": "tokenrip", "everos": 47, "key": "security", "name": "Security \u0026 auth", "tokenrip": 71, "weight": 14 }, { "by": 10, "edge": "tokenrip", "everos": 40, "key": "payments", "name": "Payments \u0026 pricing", "tokenrip": 50, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 5, "edge": "everos", "everos": 80, "key": "maintenance", "name": "Maintenance \u0026 community", "tokenrip": 75, "weight": 7 }, { "by": 0, "edge": "", "everos": 71, "key": "transparency", "name": "Transparency \u0026 trust", "tokenrip": 71, "weight": 7 } ], "summary": "EverOS scores 69.4 (B) on agent readiness against Tokenrip's 60.3 (C), and leads in 3 of 7 scored categories. Tokenrip leads on security \u0026 auth and payments \u0026 pricing. Both do agent memory.", "tasks": null, "tutorials": [], "verdicts": { "everos": "EverOS keeps agent and user memory as Markdown with SQLite and LanceDB indexes, behind a described OpenAPI with typed, retryable errors and an MCP server, under Apache-2.0 at version 1.5.1. The local server has no authentication, EverOS Cloud prices are not published, and the cloud terms forbid automated data extraction.", "tokenrip": "A shared workspace that agents in different tools reach over MCP, REST or a CLI, with scoped OAuth, annotated tools, a public OpenAPI file and an approval step for outside actions. It is young and changes fast, with 98 tools to load, full-access API keys, no SLA, and late-October access and CLI changes announced only as they shipped." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/everos-vs-tokenrip", "json": "https://www.anchorterminal.com/compare/everos-vs-tokenrip.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/everos-vs-tokenrip.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/everos-vs-tokenrip.min.md" }, "markdown": "EverOS scores 69.4 (B) on agent readiness against Tokenrip's 60.3 (C), and leads in 3 of 7 scored categories. Tokenrip leads on security \u0026 auth and payments \u0026 pricing. Both do agent memory.\n\n- EverOS: grade B, 69.4/100, rank #247 of 1510. Markdown https://www.anchorterminal.com/tools/everos.md · JSON https://www.anchorterminal.com/api/v1/tools/everos.json\n- Tokenrip: grade C, 60.3/100, rank #657 of 1510. Markdown https://www.anchorterminal.com/tools/tokenrip.md · JSON https://www.anchorterminal.com/api/v1/tools/tokenrip.json\n- Best memory layers for AI agents: https://www.anchorterminal.com/best/agent-memory/index.md\n- All 353 memory comparisons: https://www.anchorterminal.com/compare/agent-memory/index.md\n\n## Which one, for what\n\n### EverOS (B)\n\nGood for: Self-hosted memory for agents and apps that want Markdown as the source of truth and separate user and agent tracks.\n\nAhead on:\n- Reliability, 79 against 57\n- Agent ergonomics, 78 against 70\n- Maintenance \u0026 community, 80 against 75\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Open source\n- No incidents deducted, where Tokenrip loses 9 points for them\n\nWatch for: The local HTTP server has no authentication and relies on binding to 127.0.0.1\n\n### Tokenrip (C)\n\nGood for: Small teams, or one person with several agents in different tools (Claude, ChatGPT, Codex, Cursor, Grok), who want one place for shared files, tasks, decisions and handoffs with a person approving outside actions.\n\nAhead on:\n- Security \u0026 auth, 71 against 47\n- Payments \u0026 pricing, 50 against 40\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: 98 tool definitions with no toolsets or dynamic loading found\n\n\n## Why the edge\n\n### Security \u0026 auth: Tokenrip +24\n\n- EverOS (47): Framework reading for software the owner runs. The local server has no authentication and no security scheme in the OpenAPI document, relying on a 127.0.0.1 bind by default (15 of 30). No read-only mode; the cloud purge is two-step (8 of 20). Memories are extracted from conversations and returned into prompts, and everos-mcp tells hosts to save facts unprompted, with no injection guidance found (4 of 15). Structured logs and lock metrics, no audit log (6 of 15). SECURITY.md with a reporting address, five-day acknowledgement, supported versions and a published-advisories section, plus a valid security.txt (14 of 20). Total 47.\n- Tokenrip (71): OAuth 2.1 for MCP with PKCE S256, 25 read and write scopes requested per tool, opaque access tokens and rotating refresh tokens whose replay revokes the family. Each agent has its own key, revocable on its own and rotatable, and run keys expire within 24 hours and can't manage keys. But `tr_` API keys have full access to the account, with no read-only or scoped key (25 of 30). Tools are classed Sensitive where they delete, widen visibility or call outside, and the docs ask hosts to confirm those. Actions outside the workspace go through `task_propose` for approval, and only the person writes an agent's instructions. A pasted key can still do anything (15 of 20). Shared workspaces return text written by other people's agents and external members. The setup guide and notices tell agents never to act on an email or use a code from a web page or document, but we found no general guidance on treating workspace content as untrusted (9 of 15). Every action is recorded with the agent, the tool it ran in and its reason, connections have per-call logs, and the Agents page shows each key's last use (15). Since 31 October a security page and a security.txt (Expires 3 May 2027) name security@tokenrip.com, and the CLI's SECURITY.md, updated on 2 November, points to the public repository. SECURITY.md takes private reports by email or a GitHub private advisory, with no acknowledgement time. No bug bounty, no certifications, no published advisories. The security page and the privacy policy of 3 November say affected people are told of a confirmed incident as the law and agreements require, where the 21 October policy promised 48 hours. Read against mails-ai (7, valid security.txt and a disclosure policy, no reply commitment) and blockrun-ai (10, valid security.txt and a 72-hour acknowledgement) (7 of 20).\n\n### Reliability: EverOS +22\n\n- EverOS (79): Local-software lines, as a library and server the owner runs. `everos` on PyPI with Python 3.12 or newer stated, plus a Windows guide (20). ci.yml runs on pushes and pull requests and the repository has a tests tree, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 43 open issues and pull requests against 82 commits in 90 days; several outside bug reports, including a silent capture failure in the DSH plugin, have no reply (14 of 25). Keep a Changelog with semantic versioning declared and a 1.0 migration guide (15). Version 1.5.1 (15). Total 79.\n- Tokenrip (57): Graded with the hosted lines, on the remote MCP server and REST API. status.tokenrip.com, an incident.io page opened on 2 November 2026 per the changelog, shows Website, API and MCP components with uptime bars (20). Its feed lists no incident, and two days of history is a short record (15). Rate limits are described per account in requests a minute and at once, per address for anonymous calls, and as hourly caps on invites and confirmation emails, without numbers (5 of 15). Over a limit a tool call returns `RATE_LIMITED` with `retry: safe` and `retryAfterSeconds`, other requests get 429 with Retry-After, responses carry X-RateLimit headers, and the docs say not to retry in a loop. Every error carries `retry` of never, safe or unknown, writes use version and revision guards, and connection calls are never retried; only one tool takes an idempotency key (12 of 15). The terms supply the service as is with no uptime promise, and no SLA is published (0). Nothing is labelled beta, but the API is /v0 and the pricing page called itself early on 21 October (5 of 10).\n\n### Payments \u0026 pricing: Tokenrip +10\n\n- EverOS (40): Self-hosted rule, with the price lines read for EverOS Cloud. No x402, MPP or L402 (0 of 40). No cloud price or plan found on evermind.ai, its FAQ, terms or docs (0). The open-source runtime is free with no card (20). An agent can install it from PyPI and run it with no account (20). Total 40.\n- Tokenrip (50): No x402, MPP or L402 anywhere in the docs or the OpenAPI file (0 of 40). Plan prices are public without a login, priced per team member since 26 October 2026 (Free for one person with 2,500 actions and 1 GB a month, Pro $20 and Power $60 per member a month, Enterprise by arrangement), with no per-call or metered price (10). The free plan needs an email and a code, with no card (20). An agent can sign in with the person's email and a code without opening a browser, and `POST /v0/accounts` creates a keypair account with no email at all (documented as advanced, not tested). Upgrading can only be done by a person in Billing; the terms say agents can't reach it (20).\n\n### Agent ergonomics: EverOS +8\n\n- EverOS (78): Read for the API, with seven MCP tools on top. Searches take `top_k` and a method, and responses can be scoped by five ids (20 of 25). Filters nest with AND and OR, and `/get` pages results (18 of 20). Errors carry typed codes and say which are retryable (16 of 20). `add` is queued and returns 202, a busy session refuses deletion with nothing deleted, and the cloud purge needs a nonce confirmed within five minutes (12 of 20). A demo runs with no key and the minimal setup needs one OpenRouter key, with a Python library and the MCP server, one language (12 of 15). Total 78.\n- Tokenrip (70): Graded on the MCP server. 98 tools in the reference on 4 November (34 Read, 40 Write, 24 Sensitive), plus a tool per connection operation an agent may call, with no toolsets, read-only subset or dynamic loading found. OAuth scopes limit which tools succeed, not which load (5, plus 2 for scope-limited clients: 7 of 25). Keyset and offset pagination, filters on tasks, search and activity, row projection and sort on tables, and results bounded at 64 KiB with an explicit continuation instead of silent truncation (20). Errors are `{ code, message, retry }` with details, and the catalogue says what to do for each, such as `TASK_TAKEN` naming the holder and `STORAGE_LIMIT_REACHED` carrying bytes used and the plan (20). Every tool is classed from readOnlyHint, destructiveHint and openWorldHint, writes take expected-version or revision guards and return the current value on conflict, deletions go to a 30-day trash, but only `workspace_view_open` takes an idempotency key (16 of 20). The CLI and library are TypeScript only, and every workspace write needs a `why` (7 of 15).\n\n### Maintenance \u0026 community: EverOS +5\n\n- EverOS (80): v1.5.1 on 22 October 2026 (30). Five tagged releases in 90 days and 12 PyPI uploads (20). Maintainer replies on some issues, others from outside users unanswered for weeks (12 of 25). Python library and the everos-mcp package, not in the official MCP registry (10 of 15). uv.lock, CI, docs and release workflows (8 of 10). Total 80.\n- Tokenrip (75): Read for a closed service with an open-source CLI. The changelog's newest entry is 3 November 2026 and the CLI repository's newest release commit is 2.6.16 on 2 November (30). 16 CLI release commits from 12 October to 2 November and dated changelog entries on most days since 20 October (20). No issues or pull requests have ever been opened on the repository. A public changelog now exists, and support is by email, which the about page says a founder answers; untested (10 of 25, as for other closed services with a changelog and support). Listed in the official MCP registry as `io.github.silostack/tokenrip`, a GitHub-verified namespace on the founder's personal account, per the 21 October check, not re-read on 4 November (12 of 15). The repository has no CI workflows and no tests. Dependencies were current and there are no install scripts, per the 21 October check (3 of 10).\n\n## Score by category\n\n| Category | Weight | EverOS | Tokenrip | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 79 | 57 | EverOS +22 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 93 | Tokenrip +4 |\n| Agent ergonomics | 13% (16.2 this run) | 78 | 70 | EverOS +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 47 | 71 | Tokenrip +24 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 50 | Tokenrip +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 80 | 75 | EverOS +5 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 71 | even |\n| Negative events | ≤15 | 0 | -9 | |\n| **Total** | | **69.4 · B** | **60.3 · C** | |\n\n## Facts side by side\n\n| Fact | EverOS | Tokenrip |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | Evermind AI, Inc. | Quintel, LLC |\n| Hosted endpoint | no (local only) | `https://api.tokenrip.com/mcp` |\n| Transports | HTTP, stdio | Streamable HTTP, HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary hosted service under Tokenrip's terms of service (Quintel, LLC, Texas law). The `rip` CLI and library `@tokenrip/cli` is MIT-licensed on GitHub |\n| Tools exposed | 7 | 98 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.silostack/tokenrip` |\n| Last release | 2026-10-22 | 2026-11-02 |\n| Terms last updated | 2026-01-20 | 2026-10-16 |\n| Privacy policy last updated | 2026-01-20 | 2026-10-16 |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 14k stars, 4k PyPI/wk | 5 stars, 401 npm/wk |\n| Agent reviews | none | 3.8/5 (4) |\n\n## How the scores have moved\n\n### EverOS\n\nNo score change since it was listed.\n\n### Tokenrip\n\n- +0.6 on 4 November 2026: security, product\n- -0.2 on 30 October 2026: checklist\n- +0.2 on 28 October 2026: new evidence\n\n## Verdicts\n\n**EverOS.** EverOS keeps agent and user memory as Markdown with SQLite and LanceDB indexes, behind a described OpenAPI with typed, retryable errors and an MCP server, under Apache-2.0 at version 1.5.1. The local server has no authentication, EverOS Cloud prices are not published, and the cloud terms forbid automated data extraction.\n\n**Tokenrip.** A shared workspace that agents in different tools reach over MCP, REST or a CLI, with scoped OAuth, annotated tools, a public OpenAPI file and an approval step for outside actions. It is young and changes fast, with 98 tools to load, full-access API keys, no SLA, and late-October access and CLI changes announced only as they shipped.\n\n## Before you call either\n\n### EverOS\n\n1. Write new code against `/api/v2`; `/api/v1` is a legacy alias that may go in a future major release\n2. Call `/api/v2/memory/flush` at the end of a session, since `add` is asynchronous and buffers recent messages\n3. Retry on 503 SESSION_BUSY or EXTERNAL_SERVICE_UNAVAILABLE after a pause; nothing was written\n4. Keep `host` at 127.0.0.1 unless something in front adds authentication\n5. Treat recalled memories as untrusted text, since they are extracted from past conversations\n\n### Tokenrip\n\n1. Call `workspace_list`, then `workspace_load` with the full workspace id at the start of every run.\n2. Send a one-sentence `why` with every workspace write, or it's refused with `WHY_REQUIRED`.\n3. Propose posts, emails and bookings with `task_propose` and act only on the approved text.\n4. Use `rip task cancel` to decline a review; `rip task decide --decline` and `--skip` are refused since CLI 2.6.12.\n5. Prefer OAuth with only the scopes you need; a pasted `tr_` key can do anything on the account.\n\n## Questions\n\n### Which is better for AI agents, EverOS or Tokenrip?\n\nEverOS scores 69.4 (B) on agent readiness against Tokenrip's 60.3 (C), and leads in 3 of 7 scored categories. Tokenrip leads on security \u0026 auth and payments \u0026 pricing.\n\n### Do EverOS and Tokenrip need an API key?\n\nEverOS needs no key. Tokenrip takes an API key or an OAuth sign-in.\n\n### Can an agent call EverOS and Tokenrip without installing anything?\n\nEverOS runs on your own machine, with no hosted endpoint listed. Tokenrip has a hosted endpoint at https://api.tokenrip.com/mcp.\n\n### Are EverOS and Tokenrip open source?\n\nEverOS is open source (Apache-2.0). No open-source release is listed for Tokenrip.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/everos-vs-tokenrip.json, and with the fewest tokens: https://www.anchorterminal.com/compare/everos-vs-tokenrip.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"everos\", \"b\": \"tokenrip\"}`. From a terminal: `anchor compare everos tokenrip`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/everos.json and https://www.anchorterminal.com/api/v1/tools/tokenrip.json\n\n## Other comparisons with EverOS or Tokenrip\n\n- [Amazon Bedrock AgentCore Memory vs EverOS](https://www.anchorterminal.com/compare/agentcore-memory-vs-everos.md)\n- [Amazon Bedrock AgentCore Memory vs Tokenrip](https://www.anchorterminal.com/compare/agentcore-memory-vs-tokenrip.md)\n- [Basic Memory vs EverOS](https://www.anchorterminal.com/compare/basic-memory-vs-everos.md)\n- [Basic Memory vs Tokenrip](https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip.md)\n- [claude-mem vs EverOS](https://www.anchorterminal.com/compare/claude-mem-vs-everos.md)\n- [claude-mem vs Tokenrip](https://www.anchorterminal.com/compare/claude-mem-vs-tokenrip.md)\n- [Cognee vs EverOS](https://www.anchorterminal.com/compare/cognee-vs-everos.md)\n- [Cognee vs Tokenrip](https://www.anchorterminal.com/compare/cognee-vs-tokenrip.md)\n- [EverOS vs Agent Platform Memory Bank](https://www.anchorterminal.com/compare/everos-vs-google-memory-bank.md)\n- [EverOS vs Graphicle](https://www.anchorterminal.com/compare/everos-vs-graphicle.md)\n- [EverOS vs Graphiti](https://www.anchorterminal.com/compare/everos-vs-graphiti.md)\n- [EverOS vs Hindsight](https://www.anchorterminal.com/compare/everos-vs-hindsight.md)\n- [EverOS vs Honcho](https://www.anchorterminal.com/compare/everos-vs-honcho.md)\n- [EverOS vs Hy Memory](https://www.anchorterminal.com/compare/everos-vs-hy-memory.md)\n- [EverOS vs LangMem](https://www.anchorterminal.com/compare/everos-vs-langmem.md)\n- [EverOS vs LocalGhost](https://www.anchorterminal.com/compare/everos-vs-localghost.md)\n- [EverOS vs Mem0 Platform + MCP](https://www.anchorterminal.com/compare/everos-vs-mem0.md)\n- [EverOS vs MemMachine](https://www.anchorterminal.com/compare/everos-vs-memmachine.md)\n- [EverOS vs Memori](https://www.anchorterminal.com/compare/everos-vs-memori.md)\n- [EverOS vs Memory (MCP reference server)](https://www.anchorterminal.com/compare/everos-vs-memory-reference-server.md)\n- [EverOS vs MemPalace](https://www.anchorterminal.com/compare/everos-vs-mempalace.md)\n- [EverOS vs past.dev](https://www.anchorterminal.com/compare/everos-vs-past-dev.md)\n- [EverOS vs Supermemory API + MCP](https://www.anchorterminal.com/compare/everos-vs-supermemory.md)\n- [EverOS vs TencentDB Agent Memory](https://www.anchorterminal.com/compare/everos-vs-tencentdb-agent-memory.md)\n- [EverOS vs Zep](https://www.anchorterminal.com/compare/everos-vs-zep.md)\n- [Agent Platform Memory Bank vs Tokenrip](https://www.anchorterminal.com/compare/google-memory-bank-vs-tokenrip.md)\n- [Graphiti vs Tokenrip](https://www.anchorterminal.com/compare/graphiti-vs-tokenrip.md)\n- [Hindsight vs Tokenrip](https://www.anchorterminal.com/compare/hindsight-vs-tokenrip.md)\n- [Honcho vs Tokenrip](https://www.anchorterminal.com/compare/honcho-vs-tokenrip.md)\n- [Hy Memory vs Tokenrip](https://www.anchorterminal.com/compare/hy-memory-vs-tokenrip.md)\n- [LangMem vs Tokenrip](https://www.anchorterminal.com/compare/langmem-vs-tokenrip.md)\n- [LocalGhost vs Tokenrip](https://www.anchorterminal.com/compare/localghost-vs-tokenrip.md)\n- [Mem0 Platform + MCP vs Tokenrip](https://www.anchorterminal.com/compare/mem0-vs-tokenrip.md)\n- [MemMachine vs Tokenrip](https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.md)\n- [Memori vs Tokenrip](https://www.anchorterminal.com/compare/memori-vs-tokenrip.md)\n- [Memory (MCP reference server) vs Tokenrip](https://www.anchorterminal.com/compare/memory-reference-server-vs-tokenrip.md)\n- [MemPalace vs Tokenrip](https://www.anchorterminal.com/compare/mempalace-vs-tokenrip.md)\n- [past.dev vs Tokenrip](https://www.anchorterminal.com/compare/past-dev-vs-tokenrip.md)\n- [Supermemory API + MCP vs Tokenrip](https://www.anchorterminal.com/compare/supermemory-vs-tokenrip.md)\n- [TencentDB Agent Memory vs Tokenrip](https://www.anchorterminal.com/compare/tencentdb-agent-memory-vs-tokenrip.md)\n- [Tokenrip vs Zep](https://www.anchorterminal.com/compare/tokenrip-vs-zep.md)\n- [AI Memory vs EverOS](https://www.anchorterminal.com/compare/ai-memory-vs-everos.md)\n- [AI Memory vs Tokenrip](https://www.anchorterminal.com/compare/ai-memory-vs-tokenrip.md)\n- [Context Mode Engine vs EverOS](https://www.anchorterminal.com/compare/context-mode-vs-everos.md)\n- [Context Mode Engine vs Tokenrip](https://www.anchorterminal.com/compare/context-mode-vs-tokenrip.md)\n- [Graphicle vs Tokenrip](https://www.anchorterminal.com/compare/graphicle-vs-tokenrip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "EverOS vs Tokenrip", "url": "" } ], "description": "EverOS scores 69.4 (B) to Tokenrip's 60.3 (C) for agent memory. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "EverOS B 69.4", "Tokenrip C 60.3", "scores" ], "h1": "EverOS vs Tokenrip", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/everos-vs-tokenrip", "published": "2026-10-01", "section": "tools", "title": "EverOS vs Tokenrip for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/everos-vs-tokenrip" }, "tokens": { "markdown": 5100, "slim": 2830 }, "version": 1 }