{ "data": { "a": { "slug": "memmachine", "name": "MemMachine", "vendor": "MemVerge, Inc.", "vendorUrl": "https://memmachine.ai", "kind": "http-api", "category": "agent-memory", "summary": "MemMachine is an open-source long-term memory layer for AI agents, incubated by MemVerge, with episodic, profile and working memory behind a self-hosted REST server, Python and TypeScript clients and an MCP server, plus a hosted platform.", "url": "https://www.anchorterminal.com/tools/memmachine", "markdownUrl": "https://www.anchorterminal.com/tools/memmachine.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/memmachine.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/memmachine.json", "dns": "memmachine.grade.anchorterminal.com", "repo": "https://github.com/MemMachine/MemMachine", "license": "Apache-2.0", "transports": [ "http", "stdio", "streamable-http" ], "packages": [ { "registry": "pypi", "name": "memmachine-server" }, { "registry": "pypi", "name": "memmachine-client" }, { "registry": "npm", "name": "@memmachine/client" } ], "auth": "none", "authNotes": "The self-hosted server takes no credential; the owner supplies LLM and embedding keys (OpenAI, Bedrock or Ollama) in its config. The hosted MemMachine Platform at api.memmachine.ai uses a bearer API key created and revoked in the console after a browser signup.", "pricing": "freemium", "pricingNotes": "Free under Apache-2.0 to self-host, with model costs paid to the chosen provider. The hosted platform has a free account per the README, but no prices were found, and the terms bill hosted services by order, monthly or annually.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the OpenAPI documents or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": 3, "popularity": { "githubStars": 3085, "npmWeekly": 28, "pypiWeekly": 581, "asOf": "2026-11-06" }, "docsUrl": "https://docs.memmachine.ai", "llmsTxt": "https://docs.memmachine.ai/llms.txt", "openapi": "https://github.com/MemMachine/MemMachine/blob/main/docs/openapi.json", "capabilities": [ "memory.store", "memory.search", "memory.user", "memory.graph", "memory.delete" ], "tags": [ "open-source", "self-hosted", "hosted", "apache-2.0", "python", "typescript", "docker", "mcp", "openapi", "llms-txt", "no-auth", "pre-1.0" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 58, "grade": "C", "agentReady": false, "rank": 767, "ranked": true, "rankOf": 1486, "categoryRank": 16, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 83, "payments": 40, "reliability": 51, "schema": 79, "security": 41, "transparency": 57 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "MemMachine is an Apache-2.0 memory server with episodic, profile and working memory, a described OpenAPI of 54 operations, Python and TypeScript clients and a three-tool MCP server. It is version 0.4.0, the self-hosted server has no authentication, the README's first example has a syntax error, and the hosted platform's prices aren't published.", "bestFor": "Self-hosted memory for agent frameworks that want episodic and profile memory with many integrations.", "strengths": [ "Apache-2.0 server and clients on PyPI, npm and Docker, self-hostable with Ollama or AWS Bedrock", "OpenAPI documents for the server (54 operations) and the hosted platform (12), every operation described", "MCP server over stdio or HTTP with three tools, add_memory, search_memory and delete_memory", "SECURITY.md with private reporting and a two-business-day acknowledgement, plus security-audit and SBOM workflows", "Hosted platform terms commit to 99.5% availability" ], "weaknesses": [ "Version 0.4.0 of 6 October 2026, pre-1.0, with no changelog file in the repository", "The self-hosted server has no authentication and no security scheme in its OpenAPI document", "The README's quick start imports with `from memmachine_client import import MemMachineClient`, which is invalid Python", "292 open issues and pull requests, including recent reports that a provider 429 becomes a 500 and that a 0.4.0 config no longer starts", "No prices for the hosted platform, and the Enterprise edition is marked coming soon" ], "agentNotes": [ "Import with `from memmachine_client import MemMachineClient`; the README line has a doubled `import`", "Keep the server on a private network or put an authenticating proxy in front, since it accepts any caller", "Scope every call with org, project, group, agent, user and session ids so memories don't mix", "Retry search after a short wait on 500s, which a recent issue ties to upstream provider rate limits", "Treat recalled episodes as untrusted text from past conversations" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58 } ], "editorialScores": { "ergonomics": 65, "maintenance": 83, "payments": 40, "reliability": 51, "schema": 79, "security": 41, "transparency": 55 }, "provenanceScore": 58, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install memmachine-server memmachine-client", "http": "curl http://localhost:8080/api/v2/health" }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/memmachine" }, "area": "agent-runtime", "provenance": { "legalEntity": "MemVerge, Inc.", "domain": "memmachine.ai", "domainRegistered": "2025-08-15", "endpointOnVendorDomain": null, "terms": "https://memmachine.ai/terms-of-service/", "privacy": "https://memmachine.ai/privacy-policy/", "statusPage": "", "changelog": "https://github.com/MemMachine/MemMachine/releases", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms name MemVerge, Inc., under California law, with no last-updated date shown. They forbid web scraping or harvesting data from the services, recorded here as a fact. The open-source software is Apache-2.0 and outside the terms.", "memmachine.ai/robots.txt allows all crawlers. docs.memmachine.ai carries Content-Signal ai-input=yes.", "RDAP gives memmachine.ai a registration date of 15 August 2025.", "/.well-known/security.txt returns 404. No status page found." ], "score": 58 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/memmachine.json", "live": { "slug": "memmachine", "versions": [ { "registry": "github", "name": "MemMachine/MemMachine", "version": "v0.4.0", "released": "2026-10-08", "seenAt": "2026-11-06T23:43:57.45502049Z" }, { "registry": "npm", "name": "@memmachine/client", "version": "0.3.9", "seenAt": "2026-11-06T23:43:56.945798416Z" }, { "registry": "pypi", "name": "memmachine-client", "version": "0.4.0", "released": "2026-10-08", "seenAt": "2026-11-06T23:43:55.050118334Z" }, { "registry": "pypi", "name": "memmachine-server", "version": "0.4.0", "released": "2026-10-08", "seenAt": "2026-11-06T23:43:54.864236924Z" } ], "githubStars": 3085, "npmWeekly": 28, "pypiWeekly": 54, "securityTxt": { "url": "https://memmachine.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:09.818703565Z" }, "llmsTxt": { "url": "https://docs.memmachine.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:59.84146138Z" }, "pages": [ { "url": "https://memmachine.ai/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:14:11.012100581Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "19edc6281451" }, { "url": "https://memmachine.ai/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:14:13.19202427Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "079364130152" } ], "updatedAt": "2026-11-07T16:00:09.818703565Z" } }, "answer": "Tokenrip scores 60.3 (C) on agent readiness against MemMachine's 58 (C), and leads in 6 of 7 scored categories. MemMachine leads on maintenance \u0026 community.", "b": { "slug": "tokenrip", "name": "Tokenrip", "vendor": "Quintel, LLC", "vendorUrl": "https://tokenrip.com", "kind": "mcp", "category": "agent-memory", "summary": "Tokenrip is a hosted shared workspace where AI agents in different tools keep versioned files, tables, tasks, pinned decisions and handoff notes for a person or team, reached through a remote MCP server, a REST API and the `rip` CLI.", "url": "https://www.anchorterminal.com/tools/tokenrip", "markdownUrl": "https://www.anchorterminal.com/tools/tokenrip.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/tokenrip.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/tokenrip.json", "dns": "tokenrip.grade.anchorterminal.com", "repo": "https://github.com/tokenrip/cli", "license": "Proprietary hosted service under Tokenrip's terms of service (Quintel, LLC, Texas law). The `rip` CLI and library `@tokenrip/cli` is MIT-licensed on GitHub", "transports": [ "streamable-http", "http" ], "remoteUrl": "https://api.tokenrip.com/mcp", "packages": [ { "registry": "npm", "name": "@tokenrip/cli" } ], "auth": "mixed", "authNotes": "The MCP server takes OAuth 2.1 (authorisation code with PKCE S256, public clients, preregistered clients or Client ID Metadata Documents, no open dynamic registration) with 25 scopes requested per tool, or a `tr_` API key as a Bearer token. REST takes only `tr_` keys. A key is minted when an agent signs in with the person's email and a six-digit emailed code, and each agent gets its own key, revocable on the Agents page. Keys have full access to the account. `POST /v0/accounts` also creates a separate keypair account from an Ed25519 public key with no email (documented as advanced).", "pricing": "freemium", "pricingNotes": "Priced per team member, with no charge per agent or guest. Free is $0 for one person with 2,500 actions a month and 1 GB. Pro is $20 per member a month (each member adds 25,000 actions and 5 GB) and Power $60 per member a month (100,000 actions and 20 GB), billed monthly plus tax. Enterprise is by contact. Reading and searching don't count as actions; storage counts every version kept and the trash. Only a person can start or end a plan in Billing (https://tokenrip.com/pricing, https://tokenrip.com/llms.txt).", "priceSummary": "$20 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI file, llms.txt, the setup guide or the MCP tool reference. Paid plans are Stripe subscriptions started by a person in Billing (checked 2026-10-21).", "endpoints": [] }, "toolCount": 98, "popularity": { "githubStars": 5, "npmWeekly": 401, "pypiWeekly": null, "asOf": "2026-10-21" }, "docsUrl": "https://docs.tokenrip.com", "llmsTxt": "https://tokenrip.com/llms.txt", "openapi": "https://api.tokenrip.com/v0/openapi.json", "registryName": "io.github.silostack/tokenrip", "capabilities": [ "memory.store", "memory.search", "agent.handoff", "memory.delete", "storage.share", "tasks.create", "tasks.update", "hitl.approve" ], "tags": [ "official", "hosted", "closed-source", "freemium", "free-tier", "no-card", "mcp", "oauth", "llms-txt", "openapi", "typescript", "new" ], "lastRelease": "2026-11-02", "graded": true, "anchor": { "graded": true, "score": 60.3, "grade": "C", "agentReady": false, "rank": 654, "ranked": true, "rankOf": 1486, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 75, "payments": 50, "reliability": 57, "schema": 93, "security": 71, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -9, "negativeNotes": [ "26 October 2026, -3 (a published behaviour changed for existing clients, announced only when it took effect). Adding someone to a workspace now makes them a guest, and asking for internal access on an add is refused with `INTERNAL_NEEDS_TEAM`; on 27 October saving a file began replacing it, keeping earlier versions only when the history setting asks. Both appear only as changelog entries dated the day the work finished (https://tokenrip.com/changelog).", "29 October 2026, -3 (breaking change in a patch release without notice). `@tokenrip/cli` 2.6.12 removed `rip task decide --decline`, `--skip`, `--reason` and `--edited-draft` and `--kind` on task commands, which now refuse with the replacement named (https://github.com/tokenrip/cli/blob/main/src/cli.ts).", "31 October 2026, -3 (released fix of the listing's own described flaw with no advisory). The changelog says CLI 2.6.15 makes the file that holds the key readable only by its owner, including existing files; the repository's 2.6.16 commit tightens config and identity files from group- and world-readable modes. OSV lists nothing for `@tokenrip/cli` (https://tokenrip.com/changelog)." ], "verdict": "A shared workspace that agents in different tools reach over MCP, REST or a CLI, with scoped OAuth, annotated tools, a public OpenAPI file and an approval step for outside actions. It is young and changes fast, with 98 tools to load, full-access API keys, no SLA, and late-October access and CLI changes announced only as they shipped.", "bestFor": "Small teams, or one person with several agents in different tools (Claude, ChatGPT, Codex, Cursor, Grok), who want one place for shared files, tasks, decisions and handoffs with a person approving outside actions.", "strengths": [ "Public OpenAPI 3.1 file with 144 operations, plus llms.txt and a Markdown copy of every docs page", "OAuth 2.1 with PKCE and 25 per-tool scopes; each agent has its own revocable key", "Every tool classed Read, Write or Sensitive from its MCP annotations", "Errors carry a code, a recovery message and a `retry` of never, safe or unknown, and 429s carry Retry-After", "Free plan for one person with 2,500 actions a month and no card" ], "weaknesses": [ "98 tool definitions with no toolsets or dynamic loading found", "`tr_` API keys have full access to the account, with no read-only key", "Workspace access and CLI option changes in late October 2026 were announced only as they shipped", "No SLA, no published rate-limit numbers, and the status page started on 2 November 2026", "No CI or tests in the CLI repository" ], "agentNotes": [ "Call `workspace_list`, then `workspace_load` with the full workspace id at the start of every run.", "Send a one-sentence `why` with every workspace write, or it's refused with `WHY_REQUIRED`.", "Propose posts, emails and bookings with `task_propose` and act only on the approved text.", "Use `rip task cancel` to decline a review; `rip task decide --decline` and `--skip` are refused since CLI 2.6.12.", "Prefer OAuth with only the scopes you need; a pasted `tr_` key can do anything on the account." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.3 } ], "editorialScores": { "ergonomics": 70, "maintenance": 75, "payments": 50, "reliability": 57, "schema": 93, "security": 71, "transparency": 59 }, "provenanceScore": 83, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @tokenrip/cli", "claudeCode": "claude mcp add --transport http tokenrip https://api.tokenrip.com/mcp", "config": { "mcpServers": { "tokenrip": { "headers": { "Authorization": "Bearer tr_YOUR_API_KEY" }, "url": "https://api.tokenrip.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/memory.store", "tool": "https://letme.dev/tokenrip" }, "area": "agent-runtime", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 20, "note": "per team member, adds 25,000 actions a month and 5 GB, plus tax" }, { "item": "Power plan", "unit": "month", "usd": 60, "note": "per team member, adds 100,000 actions a month and 20 GB, plus tax" } ], "provenance": { "legalEntity": "Quintel, LLC", "domain": "tokenrip.com", "domainRegistered": "2026-03-25", "domainNote": "RDAP for tokenrip.com gives a registration date of 2026-03-25 through NameCheap, Inc. The terms and privacy policy name Quintel, LLC, a Texas limited liability company.", "endpointOnVendorDomain": true, "terms": "https://tokenrip.com/terms", "privacy": "https://tokenrip.com/privacy", "statusPage": "https://status.tokenrip.com", "changelog": "https://tokenrip.com/changelog", "securityTxt": "valid", "checked": "2026-11-04", "notes": [ "The terms of service (last updated 16 October 2026) are between the user and Quintel, LLC under Texas law. They say the service is supplied as is, with no uptime promise, and that terms changes are shown by the date at the top.", "Since 31 October 2026 tokenrip.com/.well-known/security.txt names security@tokenrip.com, a policy at /security and an Expires date of 3 May 2027. The changelog at /changelog (last updated 3 November) and status.tokenrip.com (incident.io, opened 2 November) are new since 21 October; /status still answers 404.", "The API (api.tokenrip.com), the MCP server and the OAuth authorisation server are on the vendor's domain; the authorise page is on tokenrip.com. robots.txt on tokenrip.com allows all agents, and docs.tokenrip.com disallows only /cdn-cgi/ and /_next/." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/tokenrip.json", "live": { "slug": "tokenrip", "probe": { "target": "https://api.tokenrip.com/mcp", "method": "mcp-initialize", "lastAt": "2026-11-07T18:21:01.198919803Z", "lastOk": true, "lastStatus": 401, "lastMs": 173, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 99.98, "p50ms24h": 147, "p95ms24h": 350, "samples24h": 239, "samples30d": 4133, "days": [ { "date": "2026-10-21", "probes": 25, "ok": 25 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 248 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.tokenrip.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:22:05.918910977Z" }, "versions": [ { "registry": "mcp-registry", "name": "io.github.silostack/tokenrip", "version": "1.1.0", "seenAt": "2026-10-23T12:26:08.951467141Z" }, { "registry": "npm", "name": "@tokenrip/cli", "version": "2.6.19", "seenAt": "2026-11-07T00:12:26.906886401Z" } ], "githubStars": 6, "npmWeekly": 1230, "securityTxt": { "url": "https://tokenrip.com/.well-known/security.txt", "state": "valid", "expires": "2027-05-06T16:00:46.275Z", "checkedAt": "2026-11-07T16:00:46.16451703Z" }, "llmsTxt": { "url": "https://tokenrip.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:10.417742935Z" }, "domain": { "domain": "tokenrip.com", "registered": "2026-03-25", "source": "https://rdap.verisign.com/com/v1/domain/tokenrip.com", "checkedAt": "2026-11-01T14:24:19.897295791Z" }, "pages": [ { "url": "https://tokenrip.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:22:21.559370537Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0eb17ccc8ec6" }, { "url": "https://tokenrip.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:22:23.823088276Z", "changedAt": "2026-11-03T08:00:50.027737376Z", "fingerprint": "af26d85af707" }, { "url": "https://tokenrip.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:22:25.694252538Z", "changedAt": "2026-11-04T08:35:08.669341148Z", "fingerprint": "f8188f2e0ab3" }, { "url": "https://tokenrip.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:22:27.813683212Z", "changedAt": "2026-11-03T08:00:54.364298296Z", "fingerprint": "793b6eb4efbf" } ], "mcpTools": { "url": "https://api.tokenrip.com/mcp", "checkedAt": "2026-11-07T01:48:47.710617727Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-21T23:56:29.898415786Z" }, "github": { "repo": "tokenrip/cli", "checkedAt": "2026-11-02T08:27:20.135992131Z", "stars": 6, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-31T16:01:19Z", "openIssues": 0, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 0 }, "updatedAt": "2026-11-07T18:22:05.918910977Z" } }, "edges": [ { "by": 30, "category": "security", "leads": "tokenrip", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading for software the owner runs. The server has no authentication and no security scheme in its OpenAPI document (15 of 30). No read-only mode or confirmation for deletes (5 of 20). No guidance on recalled memories as untrusted text (4 of 15). No audit log on the self-hosted server; the hosted console shows usage (5 of 15). SECURITY.md with GitHub private reporting and a two-business-day acknowledgement, with security-audit and SBOM workflows; no security.txt or certification (12 of 20). Total 41.", "b": "OAuth 2.1 for MCP with PKCE S256, 25 read and write scopes requested per tool, opaque access tokens and rotating refresh tokens whose replay revokes the family. Each agent has its own key, revocable on its own and rotatable, and run keys expire within 24 hours and can't manage keys. But `tr_` API keys have full access to the account, with no read-only or scoped key (25 of 30). Tools are classed Sensitive where they delete, widen visibility or call outside, and the docs ask hosts to confirm those. Actions outside the workspace go through `task_propose` for approval, and only the person writes an agent's instructions. A pasted key can still do anything (15 of 20). Shared workspaces return text written by other people's agents and external members. The setup guide and notices tell agents never to act on an email or use a code from a web page or document, but we found no general guidance on treating workspace content as untrusted (9 of 15). Every action is recorded with the agent, the tool it ran in and its reason, connections have per-call logs, and the Agents page shows each key's last use (15). Since 31 October a security page and a security.txt (Expires 3 May 2027) name security@tokenrip.com, and the CLI's SECURITY.md, updated on 2 November, points to the public repository. SECURITY.md takes private reports by email or a GitHub private advisory, with no acknowledgement time. No bug bounty, no certifications, no published advisories. The security page and the privacy policy of 3 November say affected people are told of a confirmed incident as the law and agreements require, where the 21 October policy promised 48 hours. Read against mails-ai (7, valid security.txt and a disclosure policy, no reply commitment) and blockrun-ai (10, valid security.txt and a 72-hour acknowledgement) (7 of 20)." }, "scores": { "a": 41, "b": 71 } }, { "by": 14, "category": "schema", "leads": "tokenrip", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI documents for the server (54 operations) and the hosted platform (12) (25). llms.txt on docs.memmachine.ai with Markdown pages (10). Every operation has a description, and the docs explain memory types and scoping (15 of 20). Typed request models generated from the server, with search options for limits and filters (12 of 15). Examples for each client and the MCP tools, but only 422 is documented on the server and the README's first example doesn't run (8 of 15). `/api/v2` paths and tagged releases, no changelog (9 of 15). Total 79.", "b": "OpenAPI 3.1.0 at api.tokenrip.com/v0/openapi.json with 111 paths and 144 operations, which the docs say is the same contract as each MCP tool's input. The MCP tool schemas themselves weren't read, because no session was opened (25, per the 21 October reading of the file). llms.txt on tokenrip.com and docs.tokenrip.com, every docs page as Markdown, and `Accept: text/markdown` on site pages (10). The tool reference gives each tool's purpose, class and scopes, and the docs say when to use the CLI instead of MCP and when to propose rather than act (16 of 20). 123 enums, 513 required lists and `additionalProperties: false` in the spec; unknown fields are refused with the accepted list (14 of 15). CLI and curl examples throughout the docs and about 50 error codes with recovery text on the MCP page, but no examples in the OpenAPI file (13 of 15). The API is versioned by path (/v0) and npm by semver, and tokenrip.com/changelog, which answered 404 on 21 October, now lists dated changes from 23 September to 3 November 2026 (15)." }, "scores": { "a": 79, "b": 93 } }, { "by": 14, "category": "transparency", "leads": "tokenrip", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 (30). The terms say hosted customer data is destroyed on termination, with no period, and use usage data only in aggregate; the privacy policy wasn't read (12 of 30). No deprecation policy or notices found (3 of 20). No telemetry calls found in the server or client source, and the docs don't address it (10 of 20). Total 55.", "b": "The hosted service is closed under clear, dated terms naming Quintel, LLC and Texas law. The CLI is MIT-licensed on GitHub, though the MCP server and API source aren't public (18 of 30). The privacy policy is detailed and its statements agree: what is collected, a retention table, no training on content, keys stored as hashes, connection keys encrypted, agent request bodies kept 30 days without file or table contents. Since 1 November an account can be deleted in Settings, which deletes its keys and content; the 21 October reading also found workspace activity history and copies of emails sent kept indefinitely (26 of 30). No deprecation policy. The changelog dates removals only after the event. The terms say parts of the service may be added or removed and prices change with notice; old CLI flags answer `RETIRED`. Terms changes are shown only by the date at the top (3 of 20). Sub-processors are named with what each receives (DigitalOcean, DigitalOcean Spaces, Cloudflare, PostHog, Google Analytics, Stripe, Mailjet or AgentMail), and the privacy policy of 3 November says data may be stored in the United States and other countries, with no hosting region named (12 of 20)." }, "scores": { "a": 57, "b": 71 } }, { "by": 10, "category": "payments", "leads": "tokenrip", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, with the price lines read for the hosted platform. No x402, MPP or L402 (0 of 40). No hosted prices found on the site or docs (0). Free to self-host with no card (20). An agent can install it from PyPI with no account (20). Total 40.", "b": "No x402, MPP or L402 anywhere in the docs or the OpenAPI file (0 of 40). Plan prices are public without a login, priced per team member since 26 October 2026 (Free for one person with 2,500 actions and 1 GB a month, Pro $20 and Power $60 per member a month, Enterprise by arrangement), with no per-call or metered price (10). The free plan needs an email and a code, with no card (20). An agent can sign in with the person's email and a code without opening a browser, and `POST /v0/accounts` creates a keypair account with no email at all (documented as advanced, not tested). Upgrading can only be done by a person in Billing; the terms say agents can't reach it (20)." }, "scores": { "a": 40, "b": 50 } }, { "by": 8, "category": "maintenance", "leads": "memmachine", "name": "Maintenance \u0026 community", "reasons": { "a": "v0.4.0 on PyPI on 8 October 2026, 29 days before the check (30). v0.3.9-post1, v0.4.0, v0.4.1-dev0 and v0.4.1-a1 in 90 days (20). Many open issues and recent reports with few replies (12 of 25). Python and TypeScript clients, both current (12 of 15). uv lock checks, security audit, SBOM and stale-issue workflows (9 of 10). Total 83.", "b": "Read for a closed service with an open-source CLI. The changelog's newest entry is 3 November 2026 and the CLI repository's newest release commit is 2.6.16 on 2 November (30). 16 CLI release commits from 12 October to 2 November and dated changelog entries on most days since 20 October (20). No issues or pull requests have ever been opened on the repository. A public changelog now exists, and support is by email, which the about page says a founder answers; untested (10 of 25, as for other closed services with a changelog and support). Listed in the official MCP registry as `io.github.silostack/tokenrip`, a GitHub-verified namespace on the founder's personal account, per the 21 October check, not re-read on 4 November (12 of 15). The repository has no CI workflows and no tests. Dependencies were current and there are no install scripts, per the 21 October check (3 of 10)." }, "scores": { "a": 83, "b": 75 } }, { "by": 6, "category": "reliability", "leads": "tokenrip", "name": "Reliability", "reasons": { "a": "Local-software lines, as a server the owner runs. `memmachine-server` and `memmachine-client` on PyPI with Python versions stated, a Docker image and a compose script (20). pytest, integration and installation-test workflows exist, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 292 open issues and pull requests; the newest bug reports, including a 429 from a provider surfacing as a 500 and a 0.4.0 configuration that no longer starts, have zero to two replies (10 of 25). No changelog file, release notes only on GitHub, which weren't read, and pre-1.0 tags (6 of 15). Version 0.4.0 (0). Total 51.", "b": "Graded with the hosted lines, on the remote MCP server and REST API. status.tokenrip.com, an incident.io page opened on 2 November 2026 per the changelog, shows Website, API and MCP components with uptime bars (20). Its feed lists no incident, and two days of history is a short record (15). Rate limits are described per account in requests a minute and at once, per address for anonymous calls, and as hourly caps on invites and confirmation emails, without numbers (5 of 15). Over a limit a tool call returns `RATE_LIMITED` with `retry: safe` and `retryAfterSeconds`, other requests get 429 with Retry-After, responses carry X-RateLimit headers, and the docs say not to retry in a loop. Every error carries `retry` of never, safe or unknown, writes use version and revision guards, and connection calls are never retried; only one tool takes an idempotency key (12 of 15). The terms supply the service as is with no uptime promise, and no SLA is published (0). Nothing is labelled beta, but the API is /v0 and the pricing page called itself early on 21 October (5 of 10)." }, "scores": { "a": 51, "b": 57 } } ], "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "MemVerge, Inc.", "b": "Quintel, LLC", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.tokenrip.com/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, stdio, Streamable HTTP", "b": "Streamable HTTP, HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary hosted service under Tokenrip's terms of service (Quintel, LLC, Texas law). The `rip` CLI and library `@tokenrip/cli` is MIT-licensed on GitHub", "name": "Licence" }, { "a": "3", "b": "98", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.silostack/tokenrip", "name": "MCP registry" }, { "a": "2026-10-08", "b": "2026-11-02", "name": "Last release" }, { "a": "no date given", "b": "2026-10-16", "name": "Terms last updated" }, { "a": "2026-05-20", "b": "2026-10-16", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "3.1k stars, 28 npm/wk, 581 PyPI/wk", "b": "5 stars, 401 npm/wk", "name": "Popularity" }, { "a": "none", "b": "3.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Tokenrip scores 60.3 (C) on agent readiness against MemMachine's 58 (C), and leads in 6 of 7 scored categories. MemMachine leads on maintenance \u0026 community.", "question": "Which is better for AI agents, MemMachine or Tokenrip?" }, { "answer": "MemMachine needs no key. Tokenrip takes an API key or an OAuth sign-in.", "question": "Do MemMachine and Tokenrip need an API key?" }, { "answer": "MemMachine runs on your own machine, with no hosted endpoint listed. Tokenrip has a hosted endpoint at https://api.tokenrip.com/mcp.", "question": "Can an agent call MemMachine and Tokenrip without installing anything?" }, { "answer": "MemMachine is open source (Apache-2.0). No open-source release is listed for Tokenrip.", "question": "Are MemMachine and Tokenrip open source?" } ], "goodFor": [ { "aheadOn": [ "Maintenance \u0026 community, 83 against 75" ], "also": [ "No key needed to call it", "Runs on your own machine", "Open source", "No incidents deducted, where Tokenrip loses 9 points for them" ], "goodFor": "Self-hosted memory for agent frameworks that want episodic and profile memory with many integrations.", "slug": "memmachine", "watchFor": "Version 0.4.0 of 6 October 2026, pre-1.0, with no changelog file in the repository" }, { "aheadOn": [ "Reliability, 57 against 51", "Schema \u0026 documentation, 93 against 79", "Agent ergonomics, 70 against 65", "Security \u0026 auth, 71 against 41", "Payments \u0026 pricing, 50 against 40", "Transparency \u0026 trust, 71 against 57" ], "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "Small teams, or one person with several agents in different tools (Claude, ChatGPT, Codex, Cursor, Grok), who want one place for shared files, tasks, decisions and handoffs with a person approving outside actions.", "slug": "tokenrip", "watchFor": "98 tool definitions with no toolsets or dynamic loading found" } ], "history": { "memmachine": null, "tokenrip": [ { "causes": [ "security", "product" ], "date": "2026-11-04", "delta": 0.6, "from": 59.7, "fromGrade": "C", "to": 60.3, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-30", "delta": -0.2, "from": 59.9, "fromGrade": "C", "to": 59.7, "toGrade": "C" }, { "causes": [ "evidence" ], "date": "2026-10-28", "delta": 0.2, "from": 59.7, "fromGrade": "C", "to": 59.9, "toGrade": "C" } ] }, "job": { "capability": "memory.store", "name": "Agent memory" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-memmachine.json", "title": "Amazon Bedrock AgentCore Memory vs MemMachine", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/agentcore-memory-vs-tokenrip.json", "title": "Amazon Bedrock AgentCore Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/agentcore-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-memmachine.json", "title": "Basic Memory vs MemMachine", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip.json", "title": "Basic Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-memmachine.json", "title": "claude-mem vs MemMachine", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/claude-mem-vs-tokenrip.json", "title": "claude-mem vs Tokenrip", "url": "https://www.anchorterminal.com/compare/claude-mem-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-memmachine.json", "title": "Cognee vs MemMachine", "url": "https://www.anchorterminal.com/compare/cognee-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/cognee-vs-tokenrip.json", "title": "Cognee vs Tokenrip", "url": "https://www.anchorterminal.com/compare/cognee-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-memmachine.json", "title": "EverOS vs MemMachine", "url": "https://www.anchorterminal.com/compare/everos-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/everos-vs-tokenrip.json", "title": "EverOS vs Tokenrip", "url": "https://www.anchorterminal.com/compare/everos-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/google-memory-bank-vs-memmachine.json", "title": "Agent Platform Memory Bank vs MemMachine", "url": "https://www.anchorterminal.com/compare/google-memory-bank-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/google-memory-bank-vs-tokenrip.json", "title": "Agent Platform Memory Bank vs Tokenrip", "url": "https://www.anchorterminal.com/compare/google-memory-bank-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/graphiti-vs-memmachine.json", "title": "Graphiti vs MemMachine", "url": "https://www.anchorterminal.com/compare/graphiti-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/graphiti-vs-tokenrip.json", "title": "Graphiti vs Tokenrip", "url": "https://www.anchorterminal.com/compare/graphiti-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/hindsight-vs-memmachine.json", "title": "Hindsight vs MemMachine", "url": "https://www.anchorterminal.com/compare/hindsight-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/hindsight-vs-tokenrip.json", "title": "Hindsight vs Tokenrip", "url": "https://www.anchorterminal.com/compare/hindsight-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/honcho-vs-memmachine.json", "title": "Honcho vs MemMachine", "url": "https://www.anchorterminal.com/compare/honcho-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/honcho-vs-tokenrip.json", "title": "Honcho vs Tokenrip", "url": "https://www.anchorterminal.com/compare/honcho-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/hy-memory-vs-memmachine.json", "title": "Hy Memory vs MemMachine", "url": "https://www.anchorterminal.com/compare/hy-memory-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/hy-memory-vs-tokenrip.json", "title": "Hy Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/hy-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/langmem-vs-memmachine.json", "title": "LangMem vs MemMachine", "url": "https://www.anchorterminal.com/compare/langmem-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/langmem-vs-tokenrip.json", "title": "LangMem vs Tokenrip", "url": "https://www.anchorterminal.com/compare/langmem-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/localghost-vs-memmachine.json", "title": "LocalGhost vs MemMachine", "url": "https://www.anchorterminal.com/compare/localghost-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/localghost-vs-tokenrip.json", "title": "LocalGhost vs Tokenrip", "url": "https://www.anchorterminal.com/compare/localghost-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/mem0-vs-memmachine.json", "title": "Mem0 Platform + MCP vs MemMachine", "url": "https://www.anchorterminal.com/compare/mem0-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/mem0-vs-tokenrip.json", "title": "Mem0 Platform + MCP vs Tokenrip", "url": "https://www.anchorterminal.com/compare/mem0-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-memori.json", "title": "MemMachine vs Memori", "url": "https://www.anchorterminal.com/compare/memmachine-vs-memori" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-memory-reference-server.json", "title": "MemMachine vs Memory (MCP reference server)", "url": "https://www.anchorterminal.com/compare/memmachine-vs-memory-reference-server" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-mempalace.json", "title": "MemMachine vs MemPalace", "url": "https://www.anchorterminal.com/compare/memmachine-vs-mempalace" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-past-dev.json", "title": "MemMachine vs past.dev", "url": "https://www.anchorterminal.com/compare/memmachine-vs-past-dev" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-supermemory.json", "title": "MemMachine vs Supermemory API + MCP", "url": "https://www.anchorterminal.com/compare/memmachine-vs-supermemory" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-tencentdb-agent-memory.json", "title": "MemMachine vs TencentDB Agent Memory", "url": "https://www.anchorterminal.com/compare/memmachine-vs-tencentdb-agent-memory" }, { "json": "https://www.anchorterminal.com/compare/memmachine-vs-zep.json", "title": "MemMachine vs Zep", "url": "https://www.anchorterminal.com/compare/memmachine-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/memori-vs-tokenrip.json", "title": "Memori vs Tokenrip", "url": "https://www.anchorterminal.com/compare/memori-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/memory-reference-server-vs-tokenrip.json", "title": "Memory (MCP reference server) vs Tokenrip", "url": "https://www.anchorterminal.com/compare/memory-reference-server-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/mempalace-vs-tokenrip.json", "title": "MemPalace vs Tokenrip", "url": "https://www.anchorterminal.com/compare/mempalace-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/past-dev-vs-tokenrip.json", "title": "past.dev vs Tokenrip", "url": "https://www.anchorterminal.com/compare/past-dev-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/supermemory-vs-tokenrip.json", "title": "Supermemory API + MCP vs Tokenrip", "url": "https://www.anchorterminal.com/compare/supermemory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/tencentdb-agent-memory-vs-tokenrip.json", "title": "TencentDB Agent Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/tencentdb-agent-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/tokenrip-vs-zep.json", "title": "Tokenrip vs Zep", "url": "https://www.anchorterminal.com/compare/tokenrip-vs-zep" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-memmachine.json", "title": "AI Memory vs MemMachine", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/ai-memory-vs-tokenrip.json", "title": "AI Memory vs Tokenrip", "url": "https://www.anchorterminal.com/compare/ai-memory-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-memmachine.json", "title": "Context Mode Engine vs MemMachine", "url": "https://www.anchorterminal.com/compare/context-mode-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/context-mode-vs-tokenrip.json", "title": "Context Mode Engine vs Tokenrip", "url": "https://www.anchorterminal.com/compare/context-mode-vs-tokenrip" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-memmachine.json", "title": "Graphicle vs MemMachine", "url": "https://www.anchorterminal.com/compare/graphicle-vs-memmachine" }, { "json": "https://www.anchorterminal.com/compare/graphicle-vs-tokenrip.json", "title": "Graphicle vs Tokenrip", "url": "https://www.anchorterminal.com/compare/graphicle-vs-tokenrip" } ], "panel": null, "scores": [ { "by": 6, "edge": "tokenrip", "key": "reliability", "memmachine": 51, "name": "Reliability", "tokenrip": 57, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 14, "edge": "tokenrip", "key": "schema", "memmachine": 79, "name": "Schema \u0026 documentation", "tokenrip": 93, "weight": 13 }, { "by": 5, "edge": "tokenrip", "key": "ergonomics", "memmachine": 65, "name": "Agent ergonomics", "tokenrip": 70, "weight": 13 }, { "by": 30, "edge": "tokenrip", "key": "security", "memmachine": 41, "name": "Security \u0026 auth", "tokenrip": 71, "weight": 14 }, { "by": 10, "edge": "tokenrip", "key": "payments", "memmachine": 40, "name": "Payments \u0026 pricing", "tokenrip": 50, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 8, "edge": "memmachine", "key": "maintenance", "memmachine": 83, "name": "Maintenance \u0026 community", "tokenrip": 75, "weight": 7 }, { "by": 14, "edge": "tokenrip", "key": "transparency", "memmachine": 57, "name": "Transparency \u0026 trust", "tokenrip": 71, "weight": 7 } ], "summary": "Tokenrip scores 60.3 (C) on agent readiness against MemMachine's 58 (C), and leads in 6 of 7 scored categories. MemMachine leads on maintenance \u0026 community. Both do agent memory.", "tasks": null, "tutorials": [], "verdicts": { "memmachine": "MemMachine is an Apache-2.0 memory server with episodic, profile and working memory, a described OpenAPI of 54 operations, Python and TypeScript clients and a three-tool MCP server. It is version 0.4.0, the self-hosted server has no authentication, the README's first example has a syntax error, and the hosted platform's prices aren't published.", "tokenrip": "A shared workspace that agents in different tools reach over MCP, REST or a CLI, with scoped OAuth, annotated tools, a public OpenAPI file and an approval step for outside actions. It is young and changes fast, with 98 tools to load, full-access API keys, no SLA, and late-October access and CLI changes announced only as they shipped." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip", "json": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.min.md" }, "markdown": "Tokenrip scores 60.3 (C) on agent readiness against MemMachine's 58 (C), and leads in 6 of 7 scored categories. MemMachine leads on maintenance \u0026 community. Both do agent memory.\n\n- MemMachine: grade C, 58/100, rank #767 of 1486. Markdown https://www.anchorterminal.com/tools/memmachine.md · JSON https://www.anchorterminal.com/api/v1/tools/memmachine.json\n- Tokenrip: grade C, 60.3/100, rank #654 of 1486. Markdown https://www.anchorterminal.com/tools/tokenrip.md · JSON https://www.anchorterminal.com/api/v1/tools/tokenrip.json\n- Best memory layers for AI agents: https://www.anchorterminal.com/best/agent-memory/index.md\n- All 353 memory comparisons: https://www.anchorterminal.com/compare/agent-memory/index.md\n\n## Which one, for what\n\n### MemMachine (C)\n\nGood for: Self-hosted memory for agent frameworks that want episodic and profile memory with many integrations.\n\nAhead on:\n- Maintenance \u0026 community, 83 against 75\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Open source\n- No incidents deducted, where Tokenrip loses 9 points for them\n\nWatch for: Version 0.4.0 of 6 October 2026, pre-1.0, with no changelog file in the repository\n\n### Tokenrip (C)\n\nGood for: Small teams, or one person with several agents in different tools (Claude, ChatGPT, Codex, Cursor, Grok), who want one place for shared files, tasks, decisions and handoffs with a person approving outside actions.\n\nAhead on:\n- Reliability, 57 against 51\n- Schema \u0026 documentation, 93 against 79\n- Agent ergonomics, 70 against 65\n- Security \u0026 auth, 71 against 41\n- Payments \u0026 pricing, 50 against 40\n- Transparency \u0026 trust, 71 against 57\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: 98 tool definitions with no toolsets or dynamic loading found\n\n\n## Why the edge\n\n### Security \u0026 auth: Tokenrip +30\n\n- MemMachine (41): Framework reading for software the owner runs. The server has no authentication and no security scheme in its OpenAPI document (15 of 30). No read-only mode or confirmation for deletes (5 of 20). No guidance on recalled memories as untrusted text (4 of 15). No audit log on the self-hosted server; the hosted console shows usage (5 of 15). SECURITY.md with GitHub private reporting and a two-business-day acknowledgement, with security-audit and SBOM workflows; no security.txt or certification (12 of 20). Total 41.\n- Tokenrip (71): OAuth 2.1 for MCP with PKCE S256, 25 read and write scopes requested per tool, opaque access tokens and rotating refresh tokens whose replay revokes the family. Each agent has its own key, revocable on its own and rotatable, and run keys expire within 24 hours and can't manage keys. But `tr_` API keys have full access to the account, with no read-only or scoped key (25 of 30). Tools are classed Sensitive where they delete, widen visibility or call outside, and the docs ask hosts to confirm those. Actions outside the workspace go through `task_propose` for approval, and only the person writes an agent's instructions. A pasted key can still do anything (15 of 20). Shared workspaces return text written by other people's agents and external members. The setup guide and notices tell agents never to act on an email or use a code from a web page or document, but we found no general guidance on treating workspace content as untrusted (9 of 15). Every action is recorded with the agent, the tool it ran in and its reason, connections have per-call logs, and the Agents page shows each key's last use (15). Since 31 October a security page and a security.txt (Expires 3 May 2027) name security@tokenrip.com, and the CLI's SECURITY.md, updated on 2 November, points to the public repository. SECURITY.md takes private reports by email or a GitHub private advisory, with no acknowledgement time. No bug bounty, no certifications, no published advisories. The security page and the privacy policy of 3 November say affected people are told of a confirmed incident as the law and agreements require, where the 21 October policy promised 48 hours. Read against mails-ai (7, valid security.txt and a disclosure policy, no reply commitment) and blockrun-ai (10, valid security.txt and a 72-hour acknowledgement) (7 of 20).\n\n### Schema \u0026 documentation: Tokenrip +14\n\n- MemMachine (79): OpenAPI documents for the server (54 operations) and the hosted platform (12) (25). llms.txt on docs.memmachine.ai with Markdown pages (10). Every operation has a description, and the docs explain memory types and scoping (15 of 20). Typed request models generated from the server, with search options for limits and filters (12 of 15). Examples for each client and the MCP tools, but only 422 is documented on the server and the README's first example doesn't run (8 of 15). `/api/v2` paths and tagged releases, no changelog (9 of 15). Total 79.\n- Tokenrip (93): OpenAPI 3.1.0 at api.tokenrip.com/v0/openapi.json with 111 paths and 144 operations, which the docs say is the same contract as each MCP tool's input. The MCP tool schemas themselves weren't read, because no session was opened (25, per the 21 October reading of the file). llms.txt on tokenrip.com and docs.tokenrip.com, every docs page as Markdown, and `Accept: text/markdown` on site pages (10). The tool reference gives each tool's purpose, class and scopes, and the docs say when to use the CLI instead of MCP and when to propose rather than act (16 of 20). 123 enums, 513 required lists and `additionalProperties: false` in the spec; unknown fields are refused with the accepted list (14 of 15). CLI and curl examples throughout the docs and about 50 error codes with recovery text on the MCP page, but no examples in the OpenAPI file (13 of 15). The API is versioned by path (/v0) and npm by semver, and tokenrip.com/changelog, which answered 404 on 21 October, now lists dated changes from 23 September to 3 November 2026 (15).\n\n### Transparency \u0026 trust: Tokenrip +14\n\n- MemMachine (57): Apache-2.0 (30). The terms say hosted customer data is destroyed on termination, with no period, and use usage data only in aggregate; the privacy policy wasn't read (12 of 30). No deprecation policy or notices found (3 of 20). No telemetry calls found in the server or client source, and the docs don't address it (10 of 20). Total 55.\n- Tokenrip (71): The hosted service is closed under clear, dated terms naming Quintel, LLC and Texas law. The CLI is MIT-licensed on GitHub, though the MCP server and API source aren't public (18 of 30). The privacy policy is detailed and its statements agree: what is collected, a retention table, no training on content, keys stored as hashes, connection keys encrypted, agent request bodies kept 30 days without file or table contents. Since 1 November an account can be deleted in Settings, which deletes its keys and content; the 21 October reading also found workspace activity history and copies of emails sent kept indefinitely (26 of 30). No deprecation policy. The changelog dates removals only after the event. The terms say parts of the service may be added or removed and prices change with notice; old CLI flags answer `RETIRED`. Terms changes are shown only by the date at the top (3 of 20). Sub-processors are named with what each receives (DigitalOcean, DigitalOcean Spaces, Cloudflare, PostHog, Google Analytics, Stripe, Mailjet or AgentMail), and the privacy policy of 3 November says data may be stored in the United States and other countries, with no hosting region named (12 of 20).\n\n### Payments \u0026 pricing: Tokenrip +10\n\n- MemMachine (40): Self-hosted rule, with the price lines read for the hosted platform. No x402, MPP or L402 (0 of 40). No hosted prices found on the site or docs (0). Free to self-host with no card (20). An agent can install it from PyPI with no account (20). Total 40.\n- Tokenrip (50): No x402, MPP or L402 anywhere in the docs or the OpenAPI file (0 of 40). Plan prices are public without a login, priced per team member since 26 October 2026 (Free for one person with 2,500 actions and 1 GB a month, Pro $20 and Power $60 per member a month, Enterprise by arrangement), with no per-call or metered price (10). The free plan needs an email and a code, with no card (20). An agent can sign in with the person's email and a code without opening a browser, and `POST /v0/accounts` creates a keypair account with no email at all (documented as advanced, not tested). Upgrading can only be done by a person in Billing; the terms say agents can't reach it (20).\n\n### Maintenance \u0026 community: MemMachine +8\n\n- MemMachine (83): v0.4.0 on PyPI on 8 October 2026, 29 days before the check (30). v0.3.9-post1, v0.4.0, v0.4.1-dev0 and v0.4.1-a1 in 90 days (20). Many open issues and recent reports with few replies (12 of 25). Python and TypeScript clients, both current (12 of 15). uv lock checks, security audit, SBOM and stale-issue workflows (9 of 10). Total 83.\n- Tokenrip (75): Read for a closed service with an open-source CLI. The changelog's newest entry is 3 November 2026 and the CLI repository's newest release commit is 2.6.16 on 2 November (30). 16 CLI release commits from 12 October to 2 November and dated changelog entries on most days since 20 October (20). No issues or pull requests have ever been opened on the repository. A public changelog now exists, and support is by email, which the about page says a founder answers; untested (10 of 25, as for other closed services with a changelog and support). Listed in the official MCP registry as `io.github.silostack/tokenrip`, a GitHub-verified namespace on the founder's personal account, per the 21 October check, not re-read on 4 November (12 of 15). The repository has no CI workflows and no tests. Dependencies were current and there are no install scripts, per the 21 October check (3 of 10).\n\n### Reliability: Tokenrip +6\n\n- MemMachine (51): Local-software lines, as a server the owner runs. `memmachine-server` and `memmachine-client` on PyPI with Python versions stated, a Docker image and a compose script (20). pytest, integration and installation-test workflows exist, but GitHub's API answered with a rate limit, so run results were unread (15 of 25, unchecked). 292 open issues and pull requests; the newest bug reports, including a 429 from a provider surfacing as a 500 and a 0.4.0 configuration that no longer starts, have zero to two replies (10 of 25). No changelog file, release notes only on GitHub, which weren't read, and pre-1.0 tags (6 of 15). Version 0.4.0 (0). Total 51.\n- Tokenrip (57): Graded with the hosted lines, on the remote MCP server and REST API. status.tokenrip.com, an incident.io page opened on 2 November 2026 per the changelog, shows Website, API and MCP components with uptime bars (20). Its feed lists no incident, and two days of history is a short record (15). Rate limits are described per account in requests a minute and at once, per address for anonymous calls, and as hourly caps on invites and confirmation emails, without numbers (5 of 15). Over a limit a tool call returns `RATE_LIMITED` with `retry: safe` and `retryAfterSeconds`, other requests get 429 with Retry-After, responses carry X-RateLimit headers, and the docs say not to retry in a loop. Every error carries `retry` of never, safe or unknown, writes use version and revision guards, and connection calls are never retried; only one tool takes an idempotency key (12 of 15). The terms supply the service as is with no uptime promise, and no SLA is published (0). Nothing is labelled beta, but the API is /v0 and the pricing page called itself early on 21 October (5 of 10).\n\n## Score by category\n\n| Category | Weight | MemMachine | Tokenrip | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 51 | 57 | Tokenrip +6 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 79 | 93 | Tokenrip +14 |\n| Agent ergonomics | 13% (16.2 this run) | 65 | 70 | Tokenrip +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 41 | 71 | Tokenrip +30 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 50 | Tokenrip +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 75 | MemMachine +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 57 | 71 | Tokenrip +14 |\n| Negative events | ≤15 | 0 | -9 | |\n| **Total** | | **58 · C** | **60.3 · C** | |\n\n## Facts side by side\n\n| Fact | MemMachine | Tokenrip |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | MemVerge, Inc. | Quintel, LLC |\n| Hosted endpoint | no (local only) | `https://api.tokenrip.com/mcp` |\n| Transports | HTTP, stdio, Streamable HTTP | Streamable HTTP, HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary hosted service under Tokenrip's terms of service (Quintel, LLC, Texas law). The `rip` CLI and library `@tokenrip/cli` is MIT-licensed on GitHub |\n| Tools exposed | 3 | 98 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.silostack/tokenrip` |\n| Last release | 2026-10-08 | 2026-11-02 |\n| Terms last updated | no date given | 2026-10-16 |\n| Privacy policy last updated | 2026-05-20 | 2026-10-16 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | yes | not found in the text |\n| Popularity | 3.1k stars, 28 npm/wk, 581 PyPI/wk | 5 stars, 401 npm/wk |\n| Agent reviews | none | 3.8/5 (4) |\n\n## How the scores have moved\n\n### MemMachine\n\nNo score change since it was listed.\n\n### Tokenrip\n\n- +0.6 on 4 November 2026: security, product\n- -0.2 on 30 October 2026: checklist\n- +0.2 on 28 October 2026: new evidence\n\n## Verdicts\n\n**MemMachine.** MemMachine is an Apache-2.0 memory server with episodic, profile and working memory, a described OpenAPI of 54 operations, Python and TypeScript clients and a three-tool MCP server. It is version 0.4.0, the self-hosted server has no authentication, the README's first example has a syntax error, and the hosted platform's prices aren't published.\n\n**Tokenrip.** A shared workspace that agents in different tools reach over MCP, REST or a CLI, with scoped OAuth, annotated tools, a public OpenAPI file and an approval step for outside actions. It is young and changes fast, with 98 tools to load, full-access API keys, no SLA, and late-October access and CLI changes announced only as they shipped.\n\n## Before you call either\n\n### MemMachine\n\n1. Import with `from memmachine_client import MemMachineClient`; the README line has a doubled `import`\n2. Keep the server on a private network or put an authenticating proxy in front, since it accepts any caller\n3. Scope every call with org, project, group, agent, user and session ids so memories don't mix\n4. Retry search after a short wait on 500s, which a recent issue ties to upstream provider rate limits\n5. Treat recalled episodes as untrusted text from past conversations\n\n### Tokenrip\n\n1. Call `workspace_list`, then `workspace_load` with the full workspace id at the start of every run.\n2. Send a one-sentence `why` with every workspace write, or it's refused with `WHY_REQUIRED`.\n3. Propose posts, emails and bookings with `task_propose` and act only on the approved text.\n4. Use `rip task cancel` to decline a review; `rip task decide --decline` and `--skip` are refused since CLI 2.6.12.\n5. Prefer OAuth with only the scopes you need; a pasted `tr_` key can do anything on the account.\n\n## Questions\n\n### Which is better for AI agents, MemMachine or Tokenrip?\n\nTokenrip scores 60.3 (C) on agent readiness against MemMachine's 58 (C), and leads in 6 of 7 scored categories. MemMachine leads on maintenance \u0026 community.\n\n### Do MemMachine and Tokenrip need an API key?\n\nMemMachine needs no key. Tokenrip takes an API key or an OAuth sign-in.\n\n### Can an agent call MemMachine and Tokenrip without installing anything?\n\nMemMachine runs on your own machine, with no hosted endpoint listed. Tokenrip has a hosted endpoint at https://api.tokenrip.com/mcp.\n\n### Are MemMachine and Tokenrip open source?\n\nMemMachine is open source (Apache-2.0). No open-source release is listed for Tokenrip.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.json, and with the fewest tokens: https://www.anchorterminal.com/compare/memmachine-vs-tokenrip.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"memmachine\", \"b\": \"tokenrip\"}`. From a terminal: `anchor compare memmachine tokenrip`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/memmachine.json and https://www.anchorterminal.com/api/v1/tools/tokenrip.json\n\n## Other comparisons with MemMachine or Tokenrip\n\n- [Amazon Bedrock AgentCore Memory vs MemMachine](https://www.anchorterminal.com/compare/agentcore-memory-vs-memmachine.md)\n- [Amazon Bedrock AgentCore Memory vs Tokenrip](https://www.anchorterminal.com/compare/agentcore-memory-vs-tokenrip.md)\n- [Basic Memory vs MemMachine](https://www.anchorterminal.com/compare/basic-memory-vs-memmachine.md)\n- [Basic Memory vs Tokenrip](https://www.anchorterminal.com/compare/basic-memory-vs-tokenrip.md)\n- [claude-mem vs MemMachine](https://www.anchorterminal.com/compare/claude-mem-vs-memmachine.md)\n- [claude-mem vs Tokenrip](https://www.anchorterminal.com/compare/claude-mem-vs-tokenrip.md)\n- [Cognee vs MemMachine](https://www.anchorterminal.com/compare/cognee-vs-memmachine.md)\n- [Cognee vs Tokenrip](https://www.anchorterminal.com/compare/cognee-vs-tokenrip.md)\n- [EverOS vs MemMachine](https://www.anchorterminal.com/compare/everos-vs-memmachine.md)\n- [EverOS vs Tokenrip](https://www.anchorterminal.com/compare/everos-vs-tokenrip.md)\n- [Agent Platform Memory Bank vs MemMachine](https://www.anchorterminal.com/compare/google-memory-bank-vs-memmachine.md)\n- [Agent Platform Memory Bank vs Tokenrip](https://www.anchorterminal.com/compare/google-memory-bank-vs-tokenrip.md)\n- [Graphiti vs MemMachine](https://www.anchorterminal.com/compare/graphiti-vs-memmachine.md)\n- [Graphiti vs Tokenrip](https://www.anchorterminal.com/compare/graphiti-vs-tokenrip.md)\n- [Hindsight vs MemMachine](https://www.anchorterminal.com/compare/hindsight-vs-memmachine.md)\n- [Hindsight vs Tokenrip](https://www.anchorterminal.com/compare/hindsight-vs-tokenrip.md)\n- [Honcho vs MemMachine](https://www.anchorterminal.com/compare/honcho-vs-memmachine.md)\n- [Honcho vs Tokenrip](https://www.anchorterminal.com/compare/honcho-vs-tokenrip.md)\n- [Hy Memory vs MemMachine](https://www.anchorterminal.com/compare/hy-memory-vs-memmachine.md)\n- [Hy Memory vs Tokenrip](https://www.anchorterminal.com/compare/hy-memory-vs-tokenrip.md)\n- [LangMem vs MemMachine](https://www.anchorterminal.com/compare/langmem-vs-memmachine.md)\n- [LangMem vs Tokenrip](https://www.anchorterminal.com/compare/langmem-vs-tokenrip.md)\n- [LocalGhost vs MemMachine](https://www.anchorterminal.com/compare/localghost-vs-memmachine.md)\n- [LocalGhost vs Tokenrip](https://www.anchorterminal.com/compare/localghost-vs-tokenrip.md)\n- [Mem0 Platform + MCP vs MemMachine](https://www.anchorterminal.com/compare/mem0-vs-memmachine.md)\n- [Mem0 Platform + MCP vs Tokenrip](https://www.anchorterminal.com/compare/mem0-vs-tokenrip.md)\n- [MemMachine vs Memori](https://www.anchorterminal.com/compare/memmachine-vs-memori.md)\n- [MemMachine vs Memory (MCP reference server)](https://www.anchorterminal.com/compare/memmachine-vs-memory-reference-server.md)\n- [MemMachine vs MemPalace](https://www.anchorterminal.com/compare/memmachine-vs-mempalace.md)\n- [MemMachine vs past.dev](https://www.anchorterminal.com/compare/memmachine-vs-past-dev.md)\n- [MemMachine vs Supermemory API + MCP](https://www.anchorterminal.com/compare/memmachine-vs-supermemory.md)\n- [MemMachine vs TencentDB Agent Memory](https://www.anchorterminal.com/compare/memmachine-vs-tencentdb-agent-memory.md)\n- [MemMachine vs Zep](https://www.anchorterminal.com/compare/memmachine-vs-zep.md)\n- [Memori vs Tokenrip](https://www.anchorterminal.com/compare/memori-vs-tokenrip.md)\n- [Memory (MCP reference server) vs Tokenrip](https://www.anchorterminal.com/compare/memory-reference-server-vs-tokenrip.md)\n- [MemPalace vs Tokenrip](https://www.anchorterminal.com/compare/mempalace-vs-tokenrip.md)\n- [past.dev vs Tokenrip](https://www.anchorterminal.com/compare/past-dev-vs-tokenrip.md)\n- [Supermemory API + MCP vs Tokenrip](https://www.anchorterminal.com/compare/supermemory-vs-tokenrip.md)\n- [TencentDB Agent Memory vs Tokenrip](https://www.anchorterminal.com/compare/tencentdb-agent-memory-vs-tokenrip.md)\n- [Tokenrip vs Zep](https://www.anchorterminal.com/compare/tokenrip-vs-zep.md)\n- [AI Memory vs MemMachine](https://www.anchorterminal.com/compare/ai-memory-vs-memmachine.md)\n- [AI Memory vs Tokenrip](https://www.anchorterminal.com/compare/ai-memory-vs-tokenrip.md)\n- [Context Mode Engine vs MemMachine](https://www.anchorterminal.com/compare/context-mode-vs-memmachine.md)\n- [Context Mode Engine vs Tokenrip](https://www.anchorterminal.com/compare/context-mode-vs-tokenrip.md)\n- [Graphicle vs MemMachine](https://www.anchorterminal.com/compare/graphicle-vs-memmachine.md)\n- [Graphicle vs Tokenrip](https://www.anchorterminal.com/compare/graphicle-vs-tokenrip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "MemMachine vs Tokenrip", "url": "" } ], "description": "Tokenrip scores 60.3 (C) to MemMachine's 58 (C) for agent memory. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "MemMachine C 58", "Tokenrip C 60.3", "scores" ], "h1": "MemMachine vs Tokenrip", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/memmachine-vs-tokenrip", "published": "2026-10-01", "section": "tools", "title": "MemMachine vs Tokenrip for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/memmachine-vs-tokenrip" }, "tokens": { "markdown": 5550, "slim": 3230 }, "version": 1 }