Skip to content

[cfi-dkgv10-r1] Add dkg-memory-mcp: MCP server exposing DKG V10 memory as MCP tools - #27

Open
kiyeps wants to merge 12 commits into
OriginTrail:mainfrom
kiyeps:add/dkg-memory-mcp
Open

kiyeps wants to merge 12 commits into
OriginTrail:mainfrom
kiyeps:add/dkg-memory-mcp

Conversation

@kiyeps

@kiyeps kiyeps commented Aug 22, 2026 •

Copy link
Copy Markdown

Summary

Adds integrations/dkg-memory-mcp.json — a registry entry for DKG Memory MCP Server, a transport-agnostic MCP tooling layer exposing DKG V10 three-layer verifiable memory as standard MCP tools.

Repo: https://github.com/kiyeps/dkg-memory-mcp (commit pinned in entry)

What it does

Exposes 5 MCP tools: dkg_status, dkg_write_memory, dkg_query_memory, dkg_list_assertions, dkg_share_to_swm — mountable in Claude Desktop, Cursor, Claude Code, or any generic MCP client.

Why it fits

The sibling OpenClaw Memory Curator is OpenClaw-specific. This is the transport-agnostic counterpart: any MCP-capable agent can read/write/share/query DKG memory without custom HTTP wiring — directly serving the bounty's "priority integration with OpenClaw, Hermes, and comparable research agents" and the LLM-Wiki / Autoresearch direction.

Round 1 scope compliance

  • WM + SWM only. No vm/publish tool (Verifiable Memory is a later round, explicit human-gated).
  • No UI endorsement/voting tools (disallowed by bounty rules).
  • Secret redaction before any literal leaves the process.
  • Forward-compatible: quads use urn:openclaw:memory:* subjects, sealed SWM shares are publish-ready, promotion path documented.

Verification

  • Schema validation: 0 errors / 0 warnings
  • 36 unit tests passing (node:test)
  • Live smoke test: KA create → WM write → SPARQL recall verified end-to-end (Base Sepolia testnet)
  • Quads {subject,predicate,object}, no per-quad graph field
  • Subjects reject urn:dkg:file:* / urn:dkg:extraction:*

Submission metadata — final update (2026-09-08)

Tag: cfi-dkgv10-r1

Pinned commit: 284236ea326184b986ab1d402a6d9357c35e9160 (v1.0.1)

Contributor attestation (§8a.8): I attest that this submission is my own original work (or properly licensed third-party work), and that it contains no intentional backdoors, no hidden remote-execution paths, and no undeclared network egress. — @kiyeps

Design brief: https://github.com/kiyeps/dkg-memory-mcp/blob/main/docs/DESIGN.md

Demo: https://github.com/kiyeps/dkg-memory-mcp/blob/main/docs/demo-transcript.txt — recorded against a live local DKG V10 node (v10.0.15, Base Sepolia testnet, context graph openclaw-curator). Real runtime interaction: status → write (returns Merkle root + author address) → SPARQL query → share to SWM.

Dependency advisory triage (§8a.7): The lockfile previously pulled fast-uri ≤ 3.1.5 (GHSA-jqff-g426-hqxp, HIGH) via ajv and qs ≤ 6.15.3 (GHSA-x5fp-wj9c-mxmx, GHSA-4mjr-xmp4-gh2g, moderate) via express in the MCP SDK. Resolution: lockfile upgraded past both (fast-uri 3.1.7, qs 6.16.0); npm audit --omit=dev is now clean (0 vulnerabilities). Verified the affected components were never loaded on this server's stdio runtime path (import chain is server/mcp.js + server/stdio.js only; confirmed via module-load trace).

Security notes (§8): stdio transport only — the server opens no network listener. All tool inputs zod-validated; literals escaped backslash-first before SPARQL assembly; secret-shaped values redacted before any literal leaves the process. Write authority: WM write + explicit SWM share; no VM operations. Egress: local node only (http://127.0.0.1:9200). Credentials: reads the DKG auth token from ~/.dkg/auth.token, never logs it.

Maintenance commitment: Maintained by @kiyeps; support window ≥ 6 months post-merge.

kiyeps and others added 9 commits August 22, 2026 15:22
Transport-agnostic MCP tooling layer (dkg_status, dkg_write_memory,
dkg_query_memory, dkg_list_assertions, dkg_share_to_swm) for any
MCP-capable client. Round 1 scope: WM + SWM only; no vm/publish tool,
no endorsement/voting tools. Validates 0 errors / 0 warnings.
- commit re-pinned to the pushed HEAD (previous value did not resolve)
- LICENSE and provenance publish workflow added to the repo
- publicInterfacesUsed narrowed to http-api; install pins the version
@kiyeps kiyeps changed the title Add dkg-memory-mcp: MCP server exposing DKG V10 memory as MCP tools [cfi-dkgv10-r1] Add dkg-memory-mcp: MCP server exposing DKG V10 memory as MCP tools Oct 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant