S
sammyboi81/arkhive
ArkHive — local-first governed memory for AI agents: tamper-evident SHA-256 ledger for identity, audit history, verification, and constraint-aware decisions. Apache-2.0.
no SECURITY.md
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Install & config
Install command from the repository
pip install sentarion-mcp
Parsed from the README we fetched on 2026-10-26; we have not executed it.
This is the install method the repository states, not an MCP client config, so no JSON is generated.
Key names differ by client: Clients & CLI
- Star count
- 1 ★ · sammyboi81/arkhive · read from the GitHub search API · (checked 2026-11-13 20:00:50)
- Source
- collected from the punkpeye/awesome-mcp-servers list · type: MCP server
- Harvest history
- first seen 2026-10-23 · last seen 2026-11-14 · seen 26× · listed by 23 sources
- Score
- score 2,300 · 1 ★ · 23 sources · mcp
- Install
pip install sentarion-mcp
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
pip install sentarion-mcp. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository
sammyboi81/arkhive;first catalogued 2026-10-23;last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.# ArkHive MCP
以下摘录自该仓库的 README(片段) · 在 GitHub 读完整 README →
Local-first governed memory for AI agents, with persistent identity,
tamper-evident history, verification, and constraint-aware decisions.
Tell your AI: “Check the ArkHive.”
ArkHive is an open-source
Model Context Protocol server for developers
and teams that want Claude, Codex, and other MCP clients to retain accountable
context across sessions without sending memory to a hosted service by default.
## What you get
Memory that survives the session. Your AI writes what it did and reads it
back next time — no blank slate every morning.
Tamper-evident history. Every record is hash-chained (SHA-256). Edit,
delete, or reorder any past record and verification fails — you get evidence
of change, not silent rewriting.
Local-first, no telemetry. The chain is a plain SQLite file on your
machine. Nothing is transmitted unless you explicitly opt in.
### Verify it yourself — one command, no key
Don't take "tamper-evident" on faith. Run the proof:
bash
git clone https://github.com/sammyboi81/arkhive && cd arkhive
./scripts/verify.sh # or: python -m benchmark
It writes a throwaway hash-chained ledger, verifies it clean, then forges one
block with a direct SQL edit and shows verification catch it. Real output:
[3] verify (untouched): blocks=20 brokenlinks=0 -> INTACT — context provably unbroken
[4] TAMPERED block idx=10: 'event10' -> 'FORGEDEVENT' (direct SQL edit, no hash recomputed)
[5] verify (after tamper): blocks=20 brokenlinks=1 -> TAMPERED — 1 broken links
RESULT: PASS - tamper-evidence proven.
A clean chain verifies with 0 broken links; a single forged edit is
caught. Your real data/chain.db is never touched. For the honest limits of
what a hash chain can and cannot protect, see
What the hash chain protects against
below.
> New: the Claude Code Seatbelt. Hooks that make Claude Code (and Cursor) ask before anything irreversible, remember the
> project between sessions on this chain, and refuse to say "done" until the code ran. Engine: pip install sentarion-mcp
> then sentarion seatbelt install. One-click kit with five policies and three skills: https://inboxaxe.com/mcp#seatbelt
## Install in one command
bash
python -m pip install arkhive-mcp
The MCP command is arkhive-mcp.
> Renamed: this package was formerly published as humane-intelligence
> (still installable, now frozen). ArkHive is the product;
> #HumaneIntelligence is the movement.
## Connect an MCP client
### Claude Desktop
Add this entry to your Claude Desktop MCP configuration, then restart Claude
Desktop:
json
"mcpServers": {
"arkhive": {
"command": "arkhive-mcp",
"args": []
If Claude Desktop cannot find commands installed by pip, replace
arkhive-mcp with the absolute path printed by:
bash
python -c "import shutil; print(shutil.which('arkhive-mcp'))"
### Codex
bash
codex mcp add arkhive -- arkhive-mcp
Confirm it is configured with:
bash
codex mcp list
## Available tools
| Tool | What it does |
| birth | Creates a stable agent identity with an explicit covenant. |
| remember | Appends a hash-linked, tamper-evident record for a born identity. |
| recall | Retrieves prior records so an agent can ground the current session. |
| verify | Recomputes and checks the local chain for later alteration or broken links. |
tamper-evident history, verification, and constraint-aware decisions.
Tell your AI: “Check the ArkHive.”
ArkHive is an open-source
Model Context Protocol server for developers
and teams that want Claude, Codex, and other MCP clients to retain accountable
context across sessions without sending memory to a hosted service by default.
## What you get
Memory that survives the session. Your AI writes what it did and reads it
back next time — no blank slate every morning.
Tamper-evident history. Every record is hash-chained (SHA-256). Edit,
delete, or reorder any past record and verification fails — you get evidence
of change, not silent rewriting.
Local-first, no telemetry. The chain is a plain SQLite file on your
machine. Nothing is transmitted unless you explicitly opt in.
### Verify it yourself — one command, no key
Don't take "tamper-evident" on faith. Run the proof:
bash
git clone https://github.com/sammyboi81/arkhive && cd arkhive
./scripts/verify.sh # or: python -m benchmark
It writes a throwaway hash-chained ledger, verifies it clean, then forges one
block with a direct SQL edit and shows verification catch it. Real output:
[3] verify (untouched): blocks=20 brokenlinks=0 -> INTACT — context provably unbroken
[4] TAMPERED block idx=10: 'event10' -> 'FORGEDEVENT' (direct SQL edit, no hash recomputed)
[5] verify (after tamper): blocks=20 brokenlinks=1 -> TAMPERED — 1 broken links
RESULT: PASS - tamper-evidence proven.
A clean chain verifies with 0 broken links; a single forged edit is
caught. Your real data/chain.db is never touched. For the honest limits of
what a hash chain can and cannot protect, see
What the hash chain protects against
below.
> New: the Claude Code Seatbelt. Hooks that make Claude Code (and Cursor) ask before anything irreversible, remember the
> project between sessions on this chain, and refuse to say "done" until the code ran. Engine: pip install sentarion-mcp
> then sentarion seatbelt install. One-click kit with five policies and three skills: https://inboxaxe.com/mcp#seatbelt
## Install in one command
bash
python -m pip install arkhive-mcp
The MCP command is arkhive-mcp.
> Renamed: this package was formerly published as humane-intelligence
> (still installable, now frozen). ArkHive is the product;
> #HumaneIntelligence is the movement.
## Connect an MCP client
### Claude Desktop
Add this entry to your Claude Desktop MCP configuration, then restart Claude
Desktop:
json
"mcpServers": {
"arkhive": {
"command": "arkhive-mcp",
"args": []
If Claude Desktop cannot find commands installed by pip, replace
arkhive-mcp with the absolute path printed by:
bash
python -c "import shutil; print(shutil.which('arkhive-mcp'))"
### Codex
bash
codex mcp add arkhive -- arkhive-mcp
Confirm it is configured with:
bash
codex mcp list
## Available tools
| Tool | What it does |
| birth | Creates a stable agent identity with an explicit covenant. |
| remember | Appends a hash-linked, tamper-evident record for a born identity. |
| recall | Retrieves prior records so an agent can ground the current session. |
| verify | Recomputes and checks the local chain for later alteration or broken links. |
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/sammyboi81-arkhive/)
- Source
- awesome · https://github.com/sammyboi81/arkhive
- Browse by field
- MCP servers
- Traction
- 1 ★
- Listed by
- 23 independent sources
- added
- today
- Security policy
- no
SECURITY.mdat the repository root (which does not mean it is unsafe)
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.