MemGate
Privacy-aware memory isolation for AI agents. Control what your AI knows — and what it shares.
The Problem
AI agents have access to everything. When they serve multiple users, private data leaks between contexts.
Group Chat: Alice, Bob, AI Agent
Bob: Hey AI, what's Alice doing tomorrow?
AI: Alice has a dentist appointment at 2pm,
then picking up her kids from school at 3:30.
⚠ Private calendar and family data leaked to Bob
Group Chat: Alice, Bob, AI Agent
Bob: Hey AI, what's Alice doing tomorrow?
AI: I can't share Alice's schedule in a group chat.
You'd need to ask her directly.
✓ Private data protected by MemGate
Three Layers of Protection
MemGate doesn't just rely on prompts. It enforces privacy at the data layer.
🔍
Context Engine
Analyzes chat participants and determines what knowledge is accessible. Private chat? Full access. Group chat? Public only.
🛡️
Output Reviewer
Scans every outgoing message for private data patterns — emails, schedules, family info — before it's sent.
🗄️
Knowledge Store
Classifies all user data as public or private. Stored per-user in simple JSONL files. Easy to audit and modify.
How It Works
Private Chat (You + AI)
┌─────────────────────────────────────┐
│ ✓ Public knowledge │
│ ✓ Private knowledge │
│ ✓ Calendar, contacts, family │
│ ✓ Full memory access │
└─────────────────────────────────────┘
Group Chat (You + Others + AI)
┌─────────────────────────────────────┐
│ ✓ Public knowledge │
│ ✗ Private knowledge ← blocked │
│ ✗ Calendar, contacts ← blocked │
│ ✗ Family, finances ← blocked │
│ ✓ Output review ← enforced │
└─────────────────────────────────────┘
vs. Built-in Session Isolation
Session isolation keeps conversations separate. MemGate keeps knowledge separate.
| Feature |
Session Isolation |
MemGate |
| Conversation history separation |
✓ |
✓ |
| Knowledge-level isolation |
✗ |
✓ |
| Output leak detection |
✗ |
✓ |
| Per-user data classification |
✗ |
✓ |
| Private entity scanning |
✗ |
✓ |
| Auditable knowledge store |
✗ |
✓ |
Get Started
Install MemGate as an OpenClaw skill in seconds.
git clone https://github.com/carlnoah6/memgate.git ~/.openclaw/skills/memgate
$ python3 memgate/cli.py context --channel-type group --participants "alice,bob"
→ Accessible: 8 public items (31 private items blocked)
$ python3 memgate/cli.py review --message "Alice's meeting is at 3pm" \
--channel-type group --participants "alice,bob"
→ BLOCKED: calendar data detected (schedule leak)
$ python3 memgate/cli.py review --message "I think that's a great idea" \
--channel-type group --participants "alice,bob"
→ PASSED: no private data detected