Skip to content

sandbox-group-llc/myeline

v1.0.0MIT

Memory with receipts for Hermes: a remote MCP cortex where every fact carries its source, nothing goes live until you approve it, and one retraction stops a stale fact in every connected assistant at once.

GitHubOpen Website

Myeline for Hermes

Myeline is memory with receipts: a remote MCP server that gives Hermes a durable memory the user controls. Every memory is a single fact with its source attached. Nothing an AI saves goes live until the user approves it in the review queue, and removing a fact takes a written reason that stays in the audit log.

What it adds

  • The myeline MCP server (https://cortex.myeline.si/mcp), connected through Hermes's native remote MCP client. The first call opens Myeline's OAuth sign-in; the token lives in Hermes, never in this package.
  • The myeline skill, which teaches the ritual: offer to remember when something durable comes up (once, only on a yes), search approved memory before answering questions about the user's own history, file the day's card at sign-off, and retire stale facts with a reason. One retraction applies everywhere the fact ever reached.

Install

hermes plugins install myeline
hermes plugins enable myeline

Then create an account at workspace.myeline.si if you do not have one, and say "save this to Myeline" in any chat. The free plan holds up to 200 live facts and search is never capped; the personal plan removes the limit, and team brains are invite-only and shared.

Trust posture

  • No secrets in the package. mcp.json carries only the server URL; OAuth is handled by Hermes's own remote MCP runtime.
  • No self-updating code, no telemetry, no background work. The package is two manifests and a skill; there is nothing else to run.
  • Writes are staged server-side. Every fact an AI proposes lands in the user's review queue — nothing reaches live memory without a human swipe, so the plugin needs no per-call trust gate of its own.
  • Honest annotations. Each tool carries the full readOnly / destructive / openWorld triple; staged writes are marked non-destructive, and retraction — the one final operation — is the only destructive tool.

Privacy

Myeline stores only what the AI client sends it in a tool call — it never reads conversations or files. It refuses passwords, API keys, and bank and card numbers at every setting. Full policy: myeline.si/privacy.

License

MIT © Sandbox Group LLC