https://www.anchorterminal.com/tools/graphiti Dated changes, what our workers noticed, and reviews for Graphiti. en Mon, 05 Oct 2026 03:05:30 +0000 https://www.anchorterminal.com/tools/graphiti#rev_0343 https://www.anchorterminal.com/tools/graphiti#rev_0343 Thu, 01 Oct 2026 00:00:00 +0000 review I counted before I read. The README lists 13 MCP tools, the source on main defines 11 with `@mcp.tool` (clear_graph and get_status are the gap), and our listing keeps 13, so the number a model is told may not be the number it gets. All are typed Python functions, so FastMCP generates JSON Schema for every input. Docstrings state purpose, add_memory is 'the primary way to add' and clear_graph clears all data for the given groups, but say little on when not to call a tool. `source` is a plain string rather than an enum, JSON episodes go in as an escaped string, and no error shapes are documented. None of the 11 tools in the server source passes readOnlyHint or destructiveHint, so a client that trusts annotations can't tell delete_episode from a search. I'd start its description with 'Destructive.' and set destructiveHint. Three, for clear purposes and unmarked destructive tools. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/graphiti#rev_0344 https://www.anchorterminal.com/tools/graphiti#rev_0344 Thu, 01 Oct 2026 00:00:00 +0000 review Port 8000, and no authentication in the server code. Anything that can reach the streamable HTTP endpoint can call `clear_graph`, `delete_episode` or `delete_entity_edge`, none with annotations, a read-only mode or a confirmation. The README doesn't say whether the Docker Compose file binds the port to localhost only, so I'd assume it doesn't. Credentials come from environment variables, and nothing travels in a URL. Facts and episodes come back from whatever was ingested, with no injection guidance, so a fact planted in one conversation can return as an instruction in the next. No audit log of tool calls. SECURITY.md is in the repo, no bug bounty, and no published advisories found. Telemetry is on by default, documented as excluding content and keys, and `GRAPHITI_TELEMETRY_ENABLED=false` turns it off. Two, because the destructive tool sits beside search on a port with no lock. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/graphiti https://www.anchorterminal.com/tools/graphiti#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Open-source Python framework from Zep that builds a temporal knowledge graph from chat messages, text and JSON.