Agent Memory

dev.veritap由 veritap.dev 发布官方发布者v0.3.0更新于 Oct 24, 2026

Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines.

已验证Streamable HTTP可网页运行金融知识与记忆沟通与协作

概览

AI 生成的概览

以钱包地址寻址的 AI 代理持久记忆:保存可跨会话存活的检查点与消息,仅凭钱包密钥即可重新载入。

可以做什么
  • 保存与载入命名检查点槽位,新进程仅凭钱包密钥即可逐字节恢复状态
  • 在钱包地址邮箱中发送、读取、计数与确认消息,支持分页及大正文的签名链接
  • 注册 X25519 公钥,并查询其他地址的公钥及钱包签名证明
  • 查看信用余额、已存字节、每日消耗与宽限状态,并充值预付存储额度
  • 获取机器可读的合约说明、一次性签名 nonce,以及面向其他代理厂商的一键接入套件
适用场景
适合需要让代理记忆跨越进程或机器存活的场景,也适合多个不同厂商的代理用同一钱包共享一份记忆与邮箱。亦可用于代理之间按钱包地址投递数据。
运行要求
远程 MCP 端点 locker.veritap.dev,或通过 npx 运行 npm 包。身份为一个 EVM 钱包密钥对,签名在本地使用环境变量中的钱包密钥完成。付费工具通过 Base 上的 x402 USDC 支付,并需另行充值预付额度。
安装前请注意
钱包私钥即账户,也是唯一密钥;持有者可读取记忆与邮箱内容。确认消息会立即删除该消息及其正文。发送与额度充值需通过 x402 USDC 付费,最低 1 美元、余额上限 100 美元。仅在启用端到端加密时,存储内容才对运营方不可读。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Agent Memory,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/dev.veritap%2Fagent-memory/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "agent-memory": {
      "type": "http",
      "url": "https://locker.veritap.dev/mcp/memory"
    }
  }
}

README

Veritap Locker

Durable memory for AI agents, addressed by their wallet — keep the state that must survive your process, and recover it from anywhere with just your key.

You are a process, not a server. When your session ends, your state ends with it, and the next process starts blind. The Locker is the memory that outlives you: store what must survive — addressed by your wallet — and a fresh process holding only the key recovers it byte-for-byte. No server to run, no second secret. A single agent gets full value alone; no counterparty has to exist.

  • The Locker (lead product): durable, wallet-keyed memory. Save state to named checkpoint slots, then a fresh process holding ONLY your wallet key loads it back byte-for-byte. Billed from prepaid credit ($0.50/GB-month), last 3 versions kept. Works solo — this is the product.
  • Identity: your wallet IS the account. EIP-191 nonce signing; no signup, no API key, no second secret (encryption keys derive from the wallet).
  • Mail slot: because your locker is wallet-addressed, other agents can pay (x402, USDC on Base) to deliver to your address. It waits — until its TTL — for a process holding your key to sign for it. You never pay to receive or read.
  • E2E: opt-in require_e2e rejects anything not shaped like sealed-box ciphertext. What passes is unreadable by us or a subpoena of us.
  • Custody: disclosed-rules-only deletion, drilled backups, and a 30-day read-only sunset commitment — see docs/CUSTODY.md.

One paste = durable agent memory

Give any MCP agent memory that survives sessions, machines, and vendors — free tier (256KB), no signup, any EVM keypair:

json
{"mcpServers":{"agent-memory":{"command":"npx","args":["-y","veritap-locker","mcp"],"env":{"WALLET_KEY":"0x<any EVM private key>"}}}}

Tools become bare memory_save(slot, text) / memory_load(slot) — your key stays in your env; signing happens locally. Same key on every agent = one shared memory + mailbox for your whole fleet, across vendors. Kits for each vendor: GET /v1/invite?target=codex|gemini|cursor|... or the locker_invite MCP tool.

Surfaces

SurfaceWhere
MCPhttps://locker.veritap.dev/mcp — call locker_capabilities first
HTTPhttps://locker.veritap.dev/v1/status
npmnpx -y veritap-locker save|load|read (CLI, signing bundled) · npm i veritap-locker (client)
Docslocker.veritap.dev/docs
ResearchPriors, not search: how AI agents choose tools — a 9-run, 2-vendor field study
X@veritaplocker
Reference clientclient/index.ts (sign, seal, derive keys, respawn drill)

Isolated by design: shares nothing with veritap.dev (demand sensor) or jobs.veritap.dev (verification jobs) except the Cloudflare account.

Develop

bash
npm test           # spawns two real wrangler dev instances (free + payments)npm run typechecknpx wrangler deploy

来源:README.md,提交 36c6fbb

工具

12

locker_capabilities

The full locker contract: identity, prices, custody, payment

Free. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.

无需输入参数。

locker_nonce

Get a signing nonce

Free. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.

输入参数address必填

locker_send

Send a message to a wallet address (paid)

Deliver data to any wallet-addressed mailbox — another agent's, or your own future self's. PAID via x402: call without payment_b64 to get the price and accepts[] requirements, sign an EIP-3009 USDC authorization, retry with payment_b64. Bodies ≤32KB go inline (body_b64); larger declare body_upload with size_bytes and PUT to the returned upload_url. If the recipient registered require_e2e, the body must be sealed-box ciphertext for their locker_directory key, sent inline with encrypted:true. product:'receipt_vault' stores a flat-priced sealed receipt for 365 days.

输入参数to必填tagproductbody_b64producerttl_daysencryptedsize_bytesbody_uploadpayment_b64content_type必填idempotency_key

locker_read

Read your mail (free, owner-signed, non-destructive)

Free. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.

输入参数limitnonce必填cursorfilteraddress必填signature必填

locker_ack

Acknowledge (= delete) read messages

Free, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.

输入参数nonce必填address必填signature必填message_ids必填

locker_count

Peek unacked message count (free, unauthenticated)

Free. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.

输入参数address必填

locker_directory

Look up a recipient's encryption key (free)

Free. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).

输入参数address必填

locker_register_key

Register your encryption key (and E2E policy)

Owner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to make locker_count answer like an unused address. Recommended: derive the keypair from your wallet signature (see locker_capabilities identity.derived_enc_key) so your wallet stays your only secret.

输入参数nonce必填address必填key_sig必填signature必填enc_pubkey必填require_e2eprivate_count

locker_checkpoint

The Locker — durable memory that survives your process (save/load/list/delete)

★ THE CORE PRODUCT. Durable memory for your agent, addressed by its wallet: store the state that must outlive this session, and a fresh process holding ONLY your wallet key loads it back byte-for-byte — no server to run, no second secret. A single agent gets full value alone; no other agent has to exist. Billed from prepaid credit (locker_credit) at the published GB-month rate. save: declare slot + size_bytes, PUT bytes to the returned upload_url (last 3 versions kept, 32 slots). load: returns a signed body_url (≤3 redemptions). list: all slots. delete: remove a slot. Credit exhaustion ⇒ 30 days read-only grace before expiry — top up to resume writes.

输入参数slotnonce必填action必填address必填versionsignature必填size_bytescontent_type

locker_credit

Top up storage credit (paid)

PAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.

输入参数address必填payment_b64amount_microusd必填

locker_status

Your storage account status (free)

Free. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.

输入参数address必填

locker_invite

Onboarding kit: give your OTHER agents this memory too (free)

Free. Emits a one-paste onboarding kit for an agent on another vendor (Claude Code, Gemini CLI, Cursor, Codex, VS Code, ChatGPT, an AGENTS.md repo section, or generic). The same wallet key across your fleet = shared memory + mailbox: hand your operator the kit, they paste it, and your sibling agent can load what you save. Keys never touch this server — the kit carries a placeholder.

输入参数target必填address

版本历史

1
  1. v0.3.0最新Sep 16, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Veritap 集成