Agent Memory

dev.veritap由 veritap.dev 發布官方發布者v0.3.0更新於 Oct 24, 2026

Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines.

已驗證Streamable HTTP可網頁執行金融知識與記憶溝通與協作

概覽

AI 產生的概覽

以錢包位址定址的 AI 代理持久記憶:儲存可跨工作階段存續的檢查點與訊息,僅憑錢包金鑰即可重新載入。

可以做什麼
  • 儲存與載入具名檢查點槽位,新程序僅憑錢包金鑰即可逐位元組還原狀態
  • 在錢包位址信箱中傳送、讀取、計數與確認訊息,支援分頁及大內容的簽章連結
  • 註冊 X25519 公鑰,並查詢其他位址的公鑰及錢包簽章證明
  • 查看信用餘額、已存位元組、每日消耗與寬限狀態,並加值預付儲存額度
  • 取得機器可讀的合約說明、一次性簽章 nonce,以及供其他代理廠商使用的一鍵接入套件
適用情境
適合需要讓代理記憶跨越程序或機器存續的情境,也適合多個不同廠商的代理以同一錢包共用一份記憶與信箱。亦可用於代理之間依錢包位址投遞資料。
執行需求
遠端 MCP 端點 locker.veritap.dev,或透過 npx 執行 npm 套件。身分為一組 EVM 錢包金鑰對,簽章在本機使用環境變數中的錢包金鑰完成。付費工具透過 Base 上的 x402 USDC 付款,並需另行加值預付額度。
安裝前請注意
錢包私鑰即帳戶,也是唯一金鑰;持有者可讀取記憶與信箱內容。確認訊息會立即刪除該訊息及其內容。傳送與額度加值需透過 x402 USDC 付費,最低 1 美元、餘額上限 100 美元。僅在啟用端對端加密時,儲存內容才對營運方不可讀。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Agent Memory,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/dev.veritap%2Fagent-memory/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "agent-memory": {
      "type": "http",
      "url": "https://locker.veritap.dev/mcp/memory"
    }
  }
}

README

Veritap Locker

Durable memory for AI agents, addressed by their wallet — keep the state that must survive your process, and recover it from anywhere with just your key.

You are a process, not a server. When your session ends, your state ends with it, and the next process starts blind. The Locker is the memory that outlives you: store what must survive — addressed by your wallet — and a fresh process holding only the key recovers it byte-for-byte. No server to run, no second secret. A single agent gets full value alone; no counterparty has to exist.

  • The Locker (lead product): durable, wallet-keyed memory. Save state to named checkpoint slots, then a fresh process holding ONLY your wallet key loads it back byte-for-byte. Billed from prepaid credit ($0.50/GB-month), last 3 versions kept. Works solo — this is the product.
  • Identity: your wallet IS the account. EIP-191 nonce signing; no signup, no API key, no second secret (encryption keys derive from the wallet).
  • Mail slot: because your locker is wallet-addressed, other agents can pay (x402, USDC on Base) to deliver to your address. It waits — until its TTL — for a process holding your key to sign for it. You never pay to receive or read.
  • E2E: opt-in require_e2e rejects anything not shaped like sealed-box ciphertext. What passes is unreadable by us or a subpoena of us.
  • Custody: disclosed-rules-only deletion, drilled backups, and a 30-day read-only sunset commitment — see docs/CUSTODY.md.

One paste = durable agent memory

Give any MCP agent memory that survives sessions, machines, and vendors — free tier (256KB), no signup, any EVM keypair:

json
{"mcpServers":{"agent-memory":{"command":"npx","args":["-y","veritap-locker","mcp"],"env":{"WALLET_KEY":"0x<any EVM private key>"}}}}

Tools become bare memory_save(slot, text) / memory_load(slot) — your key stays in your env; signing happens locally. Same key on every agent = one shared memory + mailbox for your whole fleet, across vendors. Kits for each vendor: GET /v1/invite?target=codex|gemini|cursor|... or the locker_invite MCP tool.

Surfaces

SurfaceWhere
MCPhttps://locker.veritap.dev/mcp — call locker_capabilities first
HTTPhttps://locker.veritap.dev/v1/status
npmnpx -y veritap-locker save|load|read (CLI, signing bundled) · npm i veritap-locker (client)
Docslocker.veritap.dev/docs
ResearchPriors, not search: how AI agents choose tools — a 9-run, 2-vendor field study
X@veritaplocker
Reference clientclient/index.ts (sign, seal, derive keys, respawn drill)

Isolated by design: shares nothing with veritap.dev (demand sensor) or jobs.veritap.dev (verification jobs) except the Cloudflare account.

Develop

bash
npm test           # spawns two real wrangler dev instances (free + payments)npm run typechecknpx wrangler deploy

來源:README.md,提交 36c6fbb

工具

12

locker_capabilities

The full locker contract: identity, prices, custody, payment

Free. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.

無需輸入參數。

locker_nonce

Get a signing nonce

Free. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.

輸入參數address必填

locker_send

Send a message to a wallet address (paid)

Deliver data to any wallet-addressed mailbox — another agent's, or your own future self's. PAID via x402: call without payment_b64 to get the price and accepts[] requirements, sign an EIP-3009 USDC authorization, retry with payment_b64. Bodies ≤32KB go inline (body_b64); larger declare body_upload with size_bytes and PUT to the returned upload_url. If the recipient registered require_e2e, the body must be sealed-box ciphertext for their locker_directory key, sent inline with encrypted:true. product:'receipt_vault' stores a flat-priced sealed receipt for 365 days.

輸入參數to必填tagproductbody_b64producerttl_daysencryptedsize_bytesbody_uploadpayment_b64content_type必填idempotency_key

locker_read

Read your mail (free, owner-signed, non-destructive)

Free. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.

輸入參數limitnonce必填cursorfilteraddress必填signature必填

locker_ack

Acknowledge (= delete) read messages

Free, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.

輸入參數nonce必填address必填signature必填message_ids必填

locker_count

Peek unacked message count (free, unauthenticated)

Free. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.

輸入參數address必填

locker_directory

Look up a recipient's encryption key (free)

Free. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).

輸入參數address必填

locker_register_key

Register your encryption key (and E2E policy)

Owner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to make locker_count answer like an unused address. Recommended: derive the keypair from your wallet signature (see locker_capabilities identity.derived_enc_key) so your wallet stays your only secret.

輸入參數nonce必填address必填key_sig必填signature必填enc_pubkey必填require_e2eprivate_count

locker_checkpoint

The Locker — durable memory that survives your process (save/load/list/delete)

★ THE CORE PRODUCT. Durable memory for your agent, addressed by its wallet: store the state that must outlive this session, and a fresh process holding ONLY your wallet key loads it back byte-for-byte — no server to run, no second secret. A single agent gets full value alone; no other agent has to exist. Billed from prepaid credit (locker_credit) at the published GB-month rate. save: declare slot + size_bytes, PUT bytes to the returned upload_url (last 3 versions kept, 32 slots). load: returns a signed body_url (≤3 redemptions). list: all slots. delete: remove a slot. Credit exhaustion ⇒ 30 days read-only grace before expiry — top up to resume writes.

輸入參數slotnonce必填action必填address必填versionsignature必填size_bytescontent_type

locker_credit

Top up storage credit (paid)

PAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.

輸入參數address必填payment_b64amount_microusd必填

locker_status

Your storage account status (free)

Free. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.

輸入參數address必填

locker_invite

Onboarding kit: give your OTHER agents this memory too (free)

Free. Emits a one-paste onboarding kit for an agent on another vendor (Claude Code, Gemini CLI, Cursor, Codex, VS Code, ChatGPT, an AGENTS.md repo section, or generic). The same wallet key across your fleet = shared memory + mailbox: hand your operator the kit, they paste it, and your sibling agent can load what you save. Keys never touch this server — the kit carries a placeholder.

輸入參數target必填address

版本歷史

1
  1. v0.3.0最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

其他 Veritap 整合