Capture deliberately
Remember explicitly or use the optional Claude Code PostToolUse hook for compact outcomes—not full transcripts.
Local engine · available now
Your vault. Your machine.
Ninai local mode is an open-source Python MCP server backed by SQLite. It does not automatically upload or sync your vault.
RuntimePython 3.11+StorageLocal SQLiteAccountNone
Implemented boundaries
Small, inspectable, and permissioned.
The local engine stores compact durable memories, requires a source URI, filters recall by explicit client scopes, observes token budgets, and records disclosures.
Recall narrowly
Only current memories in a requesting client's granted scopes are eligible.
Audit release
Inspect which memory was disclosed, to which client, and why.
Revoke safely
Remove future access without erasing memory authorized clients may still need.
Honest limits
Local-first does not mean nothing leaves.
The complete vault stays local. When an AI uses a selected context packet, that packet is sent to the provider and its data policy applies. The MVP does not claim database encryption, signed desktop releases, or an independent security audit.
Read the privacy architecture →Run the local engine today.
Install it, grant one scope, recall a sourced memory, then revoke access.
Open local installation ↗