An agent-capable MCP server with sandboxed shell access, file control, and persistent memory that survives across conversations.
Role, expertise, preferences. Tailor responses to the person, not the average.
Corrections and confirmed approaches. Never make the same mistake twice.
Ongoing work, goals, deadlines. Understand the bigger picture.
Pointers to external systems, dashboards, docs. Know where info lives.
General-purpose memory for anything worth remembering.
memory_store: "language preference" (type: feedback)run_command: mkdir -p projects/api && cd projects/api && npm init -yrun_command: npm install express typescript @types/express ts-nodewrite_file: projects/api/src/index.tsread_file and write_file are locked to whitelisted directories. Everything else is denied.
rm -rf /, mkfs, dd to disk, fork bombs — all blocked before they reach the shell.
Edit path.txt to grant new directories. Changes take effect instantly — no restart needed.
Every command, file read/write, and memory operation is logged with timestamps.
ROOT_DIR, shell, timeout, playground name — all configurable via environment variables.
Plain markdown files. No database. Inspect, edit, or version-control your memory store directly.
Install in seconds. Persistent memory from the first conversation.