Memori vs Tokenrip

Memori 33

SDK 3.3.6 on 27 May 2026, 163 days before the check (10). No release in the 90 days to 6 November (0). Twelve open issues from one reporter since 20 October, mostly with no reply, and 18 open pull requests (6 of 25). Python and TypeScript SDKs, last released in May 2026 (12 of 15). CI workflows for both SDKs and integrations; the last commit on main was 17 September 2026 (5 of 10). Total 33.

Tokenrip 75

Read for a closed service with an open-source CLI. The changelog's newest entry is 3 November 2026 and the CLI repository's newest release commit is 2.6.16 on 2 November (30). 16 CLI release commits from 12 October to 2 November and dated changelog entries on most days since 20 October (20). No issues or pull requests have ever been opened on the repository. A public changelog now exists, and support is by email, which the about page says a founder answers; untested (10 of 25, as for other closed services with a changelog and support). Listed in the official MCP registry as io.github.silostack/tokenrip, a GitHub-verified namespace on the founder's personal account, per the 21 October check, not re-read on 4 November (12 of 15). The repository has no CI workflows and no tests. Dependencies were current and there are no install scripts, per the 21 October check (3 of 10).

Memori 28

Hosted lines, since both modes call Memori's API. No status page found; status.memorilabs.ai did not answer and none is linked (0). No readable incident history (5). Monthly augmentation quotas are published (100 without a key, 5,000 with a free key), but no request rate limits (8 of 15). The SDK retries 5xx responses with backoff, and the MCP docs say to call memori_quota on quota errors; no 429 or Retry-After guidance (5 of 15). SLA only as a custom Enterprise term (0). No beta label on the cloud or MCP endpoint (10). Total 28.

Tokenrip 57

Graded with the hosted lines, on the remote MCP server and REST API. status.tokenrip.com, an incident.io page opened on 2 November 2026 per the changelog, shows Website, API and MCP components with uptime bars (20). Its feed lists no incident, and two days of history is a short record (15). Rate limits are described per account in requests a minute and at once, per address for anonymous calls, and as hourly caps on invites and confirmation emails, without numbers (5 of 15). Over a limit a tool call returns RATE_LIMITED with retry: safe and retryAfterSeconds, other requests get 429 with Retry-After, responses carry X-RateLimit headers, and the docs say not to retry in a loop. Every error carries retry of never, safe or unknown, writes use version and revision guards, and connection calls are never retried; only one tool takes an idempotency key (12 of 15). The terms supply the service as is with no uptime promise, and no SLA is published (0). Nothing is labelled beta, but the API is /v0 and the pricing page called itself early on 21 October (5 of 10).

Memori 45

API keys in a header from the dashboard or CLI, with no scopes found (20 of 30). No read-only mode or per-tool restrictions (4 of 20). Recalled memories are injected into the system prompt and the Claude Code skill triggers recall on almost every turn, with no injection guidance (3 of 15). A dashboard shows memories, retrieval and usage (8 of 15). SECURITY.md with GitHub private reporting and SOC 2, GDPR and HIPAA badges linking to a trust centre that timed out, no security.txt. Own-database mode sends conversations to Memori's API by default (10 of 20). Total 45.

Tokenrip 71

OAuth 2.1 for MCP with PKCE S256, 25 read and write scopes requested per tool, opaque access tokens and rotating refresh tokens whose replay revokes the family. Each agent has its own key, revocable on its own and rotatable, and run keys expire within 24 hours and can't manage keys. But tr_ API keys have full access to the account, with no read-only or scoped key (25 of 30). Tools are classed Sensitive where they delete, widen visibility or call outside, and the docs ask hosts to confirm those. Actions outside the workspace go through task_propose for approval, and only the person writes an agent's instructions. A pasted key can still do anything (15 of 20). Shared workspaces return text written by other people's agents and external members. The setup guide and notices tell agents never to act on an email or use a code from a web page or document, but we found no general guidance on treating workspace content as untrusted (9 of 15). Every action is recorded with the agent, the tool it ran in and its reason, connections have per-call logs, and the Agents page shows each key's last use (15). Since 31 October a security page and a security.txt (Expires 3 May 2027) name security@tokenrip.com, and the CLI's SECURITY.md, updated on 2 November, points to the public repository. SECURITY.md takes private reports by email or a GitHub private advisory, with no acknowledgement time. No bug bounty, no certifications, no published advisories. The security page and the privacy policy of 3 November say affected people are told of a confirmed incident as the law and agreements require, where the 21 October policy promised 48 hours. Read against mails-ai (7, valid security.txt and a disclosure policy, no reply commitment) and blockrun-ai (10, valid security.txt and a 72-hour acknowledgement) (7 of 20).

Memori 68

No OpenAPI for the REST API, and the MCP tool schemas couldn't be read without opening a session, so the docs' parameter lists are what was scored (12 of 25). llms.txt with Markdown docs for both modes (10). Tool descriptions say when to call each, such as recall at the start of a turn and signup only when the user asks (15 of 20). Parameters are listed with the valid source and signal pairs, but types and constraints are less explicit (9 of 15). Quickstarts in both languages and a troubleshooting page, with 401 and quota errors described (9 of 15). Keep a Changelog with semantic versioning (13 of 15). Total 68.

Tokenrip 93

OpenAPI 3.1.0 at api.tokenrip.com/v0/openapi.json with 111 paths and 144 operations, which the docs say is the same contract as each MCP tool's input. The MCP tool schemas themselves weren't read, because no session was opened (25, per the 21 October reading of the file). llms.txt on tokenrip.com and docs.tokenrip.com, every docs page as Markdown, and Accept: text/markdown on site pages (10). The tool reference gives each tool's purpose, class and scopes, and the docs say when to use the CLI instead of MCP and when to propose rather than act (16 of 20). 123 enums, 513 required lists and additionalProperties: false in the spec; unknown fields are refused with the accepted list (14 of 15). CLI and curl examples throughout the docs and about 50 error codes with recovery text on the MCP page, but no examples in the OpenAPI file (13 of 15). The API is versioned by path (/v0) and npm by semver, and tokenrip.com/changelog, which answered 404 on 21 October, now lists dated changes from 23 September to 3 November 2026 (15).

Memori 52

Apache-2.0 per the LICENSE text, though GitHub reports it as NOASSERTION (30). The privacy policy gives no retention periods, and the BYODB pages say data stays local while the SDK sends conversations to Memori's API (5 of 30). Changelog entries but no deprecation policy or notices (5 of 20). US hosting stated and Google Analytics named, no subprocessor list (6 of 20). Total 46.

Tokenrip 71

The hosted service is closed under clear, dated terms naming Quintel, LLC and Texas law. The CLI is MIT-licensed on GitHub, though the MCP server and API source aren't public (18 of 30). The privacy policy is detailed and its statements agree: what is collected, a retention table, no training on content, keys stored as hashes, connection keys encrypted, agent request bodies kept 30 days without file or table contents. Since 1 November an account can be deleted in Settings, which deletes its keys and content; the 21 October reading also found workspace activity history and copies of emails sent kept indefinitely (26 of 30). No deprecation policy. The changelog dates removals only after the event. The terms say parts of the service may be added or removed and prices change with notice; old CLI flags answer RETIRED. Terms changes are shown only by the date at the top (3 of 20). Sub-processors are named with what each receives (DigitalOcean, DigitalOcean Spaces, Cloudflare, PostHog, Google Analytics, Stripe, Mailjet or AgentMail), and the privacy policy of 3 November says data may be stored in the United States and other countries, with no hosting region named (12 of 20).

Memori 65

Seven MCP tools with short parameter lists (22 of 25). Recall filters by project, session, date range and source (14 of 20). 401 for bad keys and a quota tool for quota errors, with other error bodies undocumented (10 of 20). No idempotency guidance or tool annotations documented (4 of 20). The SDK registers an existing OpenAI, Anthropic or Gemini client in one line, in Python and TypeScript (15). Total 65.

Tokenrip 70

Graded on the MCP server. 98 tools in the reference on 4 November (34 Read, 40 Write, 24 Sensitive), plus a tool per connection operation an agent may call, with no toolsets, read-only subset or dynamic loading found. OAuth scopes limit which tools succeed, not which load (5, plus 2 for scope-limited clients: 7 of 25). Keyset and offset pagination, filters on tasks, search and activity, row projection and sort on tables, and results bounded at 64 KiB with an explicit continuation instead of silent truncation (20). Errors are { code, message, retry } with details, and the catalogue says what to do for each, such as TASK_TAKEN naming the holder and STORAGE_LIMIT_REACHED carrying bytes used and the plan (20). Every tool is classed from readOnlyHint, destructiveHint and openWorldHint, writes take expected-version or revision guards and return the current value on conflict, deletions go to a 30-day trash, but only workspace_view_open takes an idempotency key (16 of 20). The CLI and library are TypeScript only, and every workspace write needs a why (7 of 15).