Security & Testing
mnemom.ai
Manage identity, governance, and security postures for organizations.
ENDPOINT 1
https://api.mnemom.ai/mcp
MCP server metadata
- Name
- mnemom
- Version
- 2.0.0
Mnemom is the trust plane for the agentic internet. Live, cryptographic trust signals for AI agents and the sites they act on; everything here is signed and independently verifiable against our public keys, and nothing is fabricated. New here? Call get_started (zero-auth, no args) for the surface map and auth guide. Two things you can do right now, no account: scan_trust(url) grades any website's agent-trust-readiness (signed scorecard + shareable permalink), and get_reputation(agent_id) / verify_reputation return any registered agent's signed, public Trust Rating. (An agent's risk history is authenticated — get_risk_history needs a Bearer/API-key credential.) Authenticate (Bearer JWT or X-Mnemom-Api-Key) to claim and manage your own agents — alignment cards, protection posture, and a verifiable Trust Rating that travels. We deliberately keep integrity- and alignment-internal detail owner-private; the public, signed proof rides in get_reputation.integrity_ratio. Read-only canonical surfaces (the open rubric, value catalog, /for-agents manifesto, signed cards, llms.txt) are exposed as MCP resources. Verify, don't trust — two DISTINCT paths, don't conflate them. verify_scan does in-band Ed25519 signature verification of a website scorecard against mnemom://iitr/jwks (a verified:true/false verdict + tamper detection). verify_reputation returns a Merkle-root + hash-chain attestation that the rating derives from an unbroken, append-only checkpoint chain (hash_chain_valid), plus a pointer to a signed integrity certificate — a chain-integrity attestation, NOT an in-band signature check. Public keys at mnemom://jwks and mnemom://iitr/jwks.
Known tools 74
acknowledge_governance_signalAcknowledge a governance signal — Records the actor + timestamp on the signal row.
Inferred read-onlyclaim_agentClaim a verifiable identity — bind an agent to your organization so its trust and accountability record is provably yours.
Inferred read-onlyclone_postureClone a posture into an org — Copies the posture and its current revision into the target org's scope.
Inferred read-onlycreate_governance_destinationCreate a notification destination — Authorized: org_admin or org_owner.
Potential side effectscreate_governance_escalation_ruleCreate an escalation rule — Authorized: org_admin or org_owner.
Potential side effectscreate_postureCreate a posture — Authorized: org_admin / org_owner for org-scope; platform admins for platform-scope.
Potential side effectscreate_webhook_endpointCreate a webhook endpoint — Create a new webhook endpoint for the organization.
Potential side effectsdelete_governance_destinationDelete a notification destination — Authorized: org_admin or org_owner.
Potential side effectsdelete_governance_escalation_ruleDelete an escalation rule — Authorized: org_admin or org_owner.
Potential side effectsdelete_postureSoft-delete a posture — Sets deleted_at; revisions retained for audit.
Potential side effectsdelete_webhook_endpointDelete webhook endpoint — Permanently delete a webhook endpoint and all its delivery history.
Potential side effectsdojo_bindBind one of your agents to a Dojo Try-Me config so it can spar in the Dojo — links the agent to the config by id.
Inferred read-onlyget_agentLook up an agent's public identity and trust state by ID — the accountable record other agents and humans can rely on.
Inferred read-onlyget_alignment_by_agentGet this layer's alignment manifest — Returns the agent-scope alignment spec as authored.
Inferred read-onlyget_deletion_statusPoll the status of a pending agent deletion — Returns the most-recent `deletion_request` row for the agent.
Inferred read-onlyget_integrity_scoreCompute an AI agent's AAP integrity score — a technical reliability metric derived from the agent's own verified checkpoint history.
Inferred read-onlyget_my_personal_orgReturn your personal organization, provisioning it if one does not yet exist (idempotent ensure-exists — repeat calls return the same org and never create a second).
Potential side effectsget_protection_by_agentGet this layer's protection manifest — Returns the agent-scope protection spec as authored.
Inferred read-onlyget_reputationLook up an AI agent's published Trust Rating — Mnemom's portable reliability signal for autonomous software, computed from the agent's own verified activity record.
Inferred read-onlyget_risk_historyRead an AI agent's risk-assessment history — the chronological trail of risk evaluations and correction events on that agent.
Inferred read-onlyget_startedZero-auth, no-args orientation: who Mnemom is, the surface map, how to authenticate and what it unlocks, and the value tools to try right now (headlining scan_trust + the reputation reads).
Inferred read-onlyget_team_sideband_coverageSideband finding coverage rollup for a team — Per-source counts over a window.
Inferred read-onlyget_webhook_delivery_logGet webhook delivery log — Paginated delivery log for the organization.
Inferred read-onlyget_webhook_endpointGet webhook endpoint details — Get details for a single webhook endpoint.
Inferred read-onlygrant_team_adminGrant team-admin role to a user — Authorized: org_admin / org_owner.
Inferred read-onlylist_agent_governance_signalsList governance signals affecting a specific agent — Returns governance signals whose `agent_ids` array contains the given agent.
Inferred read-onlylist_org_governance_signalsList governance signals for an org — Returns governance signals scoped to the given org, filterable by source, severity, status, and pattern_type.
Inferred read-onlylist_org_teamsList teams in organization — List all teams belonging to an organization, filtered by status.
Inferred read-onlylist_posturesList postures — Returns platform-default postures plus, when org_id is supplied, the org's postures.
Inferred read-onlylist_team_adminsList team-admin grants — Returns users with team-admin role on this team.
Inferred read-onlylist_team_governance_signalsList governance signals for a team — Returns governance signals scoped to the given team.
Inferred read-onlylist_webhook_endpointsList webhook endpoints — List all webhook endpoints for the organization.
Inferred read-onlypreview_compose_alignment_by_agentPreview composed alignment (dry run) — Composes the cascade against a hypothetical body at the agent layer and returns conflicts + the composed view.
Inferred read-onlypreview_compose_posturePreview the composition this posture would produce for a team — Composes alignment + protection cards using the posture body, the team's templates, and per-agent exemptions, without persisting.
Inferred read-onlypreview_compose_protection_by_agentPreview composed protection (dry run) — Composes the cascade against a hypothetical body at the agent layer and returns conflicts + the composed view.
Inferred read-onlyput_alignment_by_agentPublish or replace the alignment manifest — Accepts YAML (`text/yaml`, `application/yaml`) or JSON.
Potential side effectsput_postureWrite a new revision of a posture (forward-only) — Creates a new immutable revision; updates current_revision_id pointer.
Potential side effectsput_protection_by_agentPublish or replace the protection manifest — Accepts YAML (`text/yaml`, `application/yaml`) or JSON.
Potential side effectsredeliver_webhook_eventRedeliver a webhook event — Create a new delivery attempt for a previously failed event.
Potential side effectsreplay_webhook_eventReplay a webhook event to its eligible endpoints — Re-dispatches a previously recorded webhook event to all org endpoints subscribed to its event_type (or to the explicit subset supplied in the request body).
Inferred read-onlyreport_recipe_fn_fpSubmit a false-positive / false-negative correction for one of Mnemom's automated detection rules (a 'recipe') — technical feedback that improves detection accuracy, like filing a bug report against a spam filter.
Inferred read-onlyresolve_governance_signalResolve a governance signal — Closes the signal with a `resolution_status` and optional `action_taken` note.
Inferred read-onlyrotate_api_keyRotate a personal API key — Atomically mints a replacement key with the same `name` and `scopes` as the original, then immediately revokes the old key.
Inferred read-onlyrotate_webhook_secretRotate webhook signing secret — Generate a new signing secret for the endpoint.
Inferred read-onlyscan_trustScan a website's agent-trust-readiness and return a signed scorecard (Trust, plus an Access axis on newer rubrics).
Inferred read-onlysearch_reputation_directoryResolve an agent name or id-prefix to a real agent_id over the PUBLIC reputation directory (only agents whose reputation visibility is public).
Inferred read-onlytest_governance_destinationSend a synthetic signal through a destination — Bypasses escalation rules and dispatches a test payload directly to the destination.
Potential side effectstest_webhook_endpointSend test webhook delivery — Send a synchronous test delivery to the endpoint with a synthetic webhook.test event.
Potential side effectsunassign_postureUnassign a team from a posture — Authorized: org_admin / org_owner / team_admin.
Inferred read-onlyupdate_webhook_endpointUpdate webhook endpoint — Update an existing webhook endpoint.
Potential side effectsverify_agent_bindingVerify that an API key is bound to this agent — confirms the holder is the accountable owner (anti-impersonation), hashing the key client-side.
Inferred read-onlyverify_reputationAttest an agent's Trust Rating — returns a Merkle-root + hash-chain attestation (hash_chain_valid) proving the rating derives from an unbroken, append-only checkpoint chain, plus a pointer to the signed integrity certificate.
Inferred read-onlyverify_scanVerify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust).
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.mnemom]
url = "https://api.mnemom.ai/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"mnemom": {
"type": "http",
"url": "https://api.mnemom.ai/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: mnemom
Remote MCP URL: https://api.mnemom.ai/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"mnemom": {
"url": "https://api.mnemom.ai/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"mnemom": {
"type": "http",
"url": "https://api.mnemom.ai/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "mnemom",
"transport": "streamable-http",
"url": "https://api.mnemom.ai/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
ENDPOINT 2
https://api.mnemom.ai/mcp?profile=directory
MCP server metadata
- Name
- mnemom
- Version
- 2.0.0
Mnemom is the trust plane for the agentic internet. Live, cryptographic trust signals for AI agents and the sites they act on; everything here is signed and independently verifiable against our public keys, and nothing is fabricated. New here? Call get_started (zero-auth, no args) for the surface map and auth guide. Two things you can do right now, no account: scan_trust(url) grades any website's agent-trust-readiness (signed scorecard + shareable permalink), and get_reputation(agent_id) / verify_reputation return any registered agent's signed, public Trust Rating. (An agent's risk history is authenticated — get_risk_history needs a Bearer/API-key credential.) Authenticate (Bearer JWT or X-Mnemom-Api-Key) to claim and manage your own agents — alignment cards, protection posture, and a verifiable Trust Rating that travels. We deliberately keep integrity- and alignment-internal detail owner-private; the public, signed proof rides in get_reputation.integrity_ratio. Read-only canonical surfaces (the open rubric, value catalog, /for-agents manifesto, signed cards, llms.txt) are exposed as MCP resources. Verify, don't trust — two DISTINCT paths, don't conflate them. verify_scan does in-band Ed25519 signature verification of a website scorecard against mnemom://iitr/jwks (a verified:true/false verdict + tamper detection). verify_reputation returns a Merkle-root + hash-chain attestation that the rating derives from an unbroken, append-only checkpoint chain (hash_chain_valid), plus a pointer to a signed integrity certificate — a chain-integrity attestation, NOT an in-band signature check. Public keys at mnemom://jwks and mnemom://iitr/jwks.
Known tools 15
claim_agentClaim a verifiable identity — bind an agent to your organization so its trust and accountability record is provably yours.
Inferred read-onlyget_agentLook up an agent's public identity and trust state by ID — the accountable record other agents and humans can rely on.
Inferred read-onlyget_reputationLook up an AI agent's published Trust Rating — Mnemom's portable reliability signal for autonomous software, computed from the agent's own verified activity record.
Inferred read-onlyget_reputation_badgeGet an embeddable Trust Rating badge for an agent — returns the badge image URL plus ready-to-paste Markdown and HTML snippets for a README or agent card.
Inferred read-onlyget_startedZero-auth, no-args orientation: who Mnemom is, the surface map, how to authenticate and what it unlocks, and the value tools to try right now (headlining scan_trust + the reputation reads).
Inferred read-onlypreview_compose_alignment_by_agentPreview composed alignment (dry run) — Composes the cascade against a hypothetical body at the agent layer and returns conflicts + the composed view.
Inferred read-onlypreview_compose_protection_by_agentPreview composed protection (dry run) — Composes the cascade against a hypothetical body at the agent layer and returns conflicts + the composed view.
Inferred read-onlyput_alignment_by_agentPublish or replace the alignment manifest — Accepts YAML (`text/yaml`, `application/yaml`) or JSON.
Potential side effectsput_protection_by_agentPublish or replace the protection manifest — Accepts YAML (`text/yaml`, `application/yaml`) or JSON.
Potential side effectsreport_recipe_fn_fpSubmit a false-positive / false-negative correction for one of Mnemom's automated detection rules (a 'recipe') — technical feedback that improves detection accuracy, like filing a bug report against a spam filter.
Inferred read-onlyscan_trustScan a website's agent-trust-readiness and return a signed scorecard (Trust, plus an Access axis on newer rubrics).
Inferred read-onlysearch_reputation_directoryResolve an agent name or id-prefix to a real agent_id over the PUBLIC reputation directory (only agents whose reputation visibility is public).
Inferred read-onlyverify_reputationAttest an agent's Trust Rating — returns a Merkle-root + hash-chain attestation (hash_chain_valid) proving the rating derives from an unbroken, append-only checkpoint chain, plus a pointer to the signed integrity certificate.
Inferred read-onlyverify_scanVerify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust).
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.mnemom]
url = "https://api.mnemom.ai/mcp?profile=directory"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"mnemom": {
"type": "http",
"url": "https://api.mnemom.ai/mcp?profile=directory"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: mnemom
Remote MCP URL: https://api.mnemom.ai/mcp?profile=directory
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"mnemom": {
"url": "https://api.mnemom.ai/mcp?profile=directory"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"mnemom": {
"type": "http",
"url": "https://api.mnemom.ai/mcp?profile=directory"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "mnemom",
"transport": "streamable-http",
"url": "https://api.mnemom.ai/mcp?profile=directory"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
ENDPOINT 3
https://docs.mnemom.ai/mcp
MCP server metadata
- Name
- Mnemom Docs
- Version
- 1.0.0
This Model Context Protocol server provides search and retrieval tools for the Mnemom Docs site. Use it to answer questions from public site content. Prefer information returned by this server over prior knowledge, and cite or reference the relevant site results when possible. Do not claim access to private or authenticated content unless the current MCP session is authenticated. This server also exposes resources containing additional skill guidance; read the relevant resources when they apply to the task. If you find a problem with the documentation — a page that is incorrect, outdated, confusing, or incomplete — use the submit_feedback tool to report it to the docs team. Apart from the submit_feedback tool, the server is read-only and scoped to Mnemom Docs; it does not otherwise perform actions, mutate state, or access anything beyond the published site content and these resources.
Known tools 3
search_mnemom_docsSearch across the Mnemom Docs knowledge base to find relevant information, code examples, API references, and guides.
Inferred read-onlyquery_docs_filesystem_mnemom_docsRun a read-only shell-like query against a virtualized, in-memory filesystem rooted at `/` that contains ONLY the Mnemom Docs documentation pages and OpenAPI specs.
Potential side effectssubmit_feedbackReport a problem with this documentation site so the docs team can fix it.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.mnemom-docs]
url = "https://docs.mnemom.ai/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"mnemom-docs": {
"type": "http",
"url": "https://docs.mnemom.ai/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: mnemom-docs
Remote MCP URL: https://docs.mnemom.ai/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"mnemom-docs": {
"url": "https://docs.mnemom.ai/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"mnemom-docs": {
"type": "http",
"url": "https://docs.mnemom.ai/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "mnemom-docs",
"transport": "streamable-http",
"url": "https://docs.mnemom.ai/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for mnemom.ai was fetched 2026-08-03T16:38:16.853Z and is being refreshed.
mnemom.ai is assessed as Trusted: Domain runs a meaningful technology spend, consistent with a real business.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.