Hosted agent memory with provenance, contradiction surfacing, and snapshot rollback.
Hosted memory infrastructure for AI agents: commit, recall, and inspect agent state through one API key, with verification, provenance, and recovery around every write.
Retrieval answers "what is similar to this?". Long-running agents also need to answer "who wrote this state, was it verified, did it contradict what we already knew, and can we undo it?" — that is the layer Bilinc provides.
Bilinc 2.2.0 on PyPI is the public cloud-only package: a thin Python SDK, CLI, and MCP adapter for Bilinc Cloud. It does not ship the local StatePlane, storage backends, eval, observability, integrations, or server runtime internals.
Frozen regression receipt — LongMemEval-s cleaned retrieval fixture, 500 questions: Hit@5 98.0%, NDCG@5 0.913, no LLM reranker, no paid API. This is an isolated retrieval guardrail, not a current hosted SLA, end-to-end agent score, or competitor ranking — see Benchmark receipt for the full scope and qualification.
Bilinc is the state layer between an agent and the things it must remember. It keeps memory writes attributable, correctable, and recoverable instead of treating retrieval as a bag of similar text.
| If your agent needs to... | Bilinc gives it... |
|---|---|
| Recall a decision before acting | Key-scoped recall with explicit profiles and evidence metadata |
| Correct a bad memory | revise, contradiction-aware state, and provenance-preserving updates |
| Recover from an unsafe run | Snapshots, diffs, and confirmed rollback |
| Work across any MCP-compatible agent | A Python SDK, CLI, and stdio MCP adapter |
The fastest path is pip install -U bilinc, bilinc login, then bilinc quicktest against Bilinc Cloud.
| You want... | Use... |
|---|---|
| A hosted memory API for an agent or MCP client | The public cloud-only package from PyPI |
| Local StatePlane, SQLite/PostgreSQL, benchmarks, or internals | This repository and the architecture guide |
| A hosted MCP connection | The MCP setup guide |
The public package is intentionally smaller than this repository. It does not bundle the internal StatePlane or local storage runtime.
pip install -U bilinc
bilinc start
bilinc start is the first-run guide. The activation target is simple: reach a
passing bilinc quicktest, which performs one hosted commit, one hosted recall,
and one Cloud status check.
bilinc login --api-key bil_live_...
bilinc quicktest
To reproduce this release exactly:
pip install -U bilinc==2.2.0
If you prefer a browser guide, open https://bilinc.space/install and follow the same four-step path.
Bilinc exposes a standard Model Context Protocol server over stdio, so any MCP-compatible client can connect — Claude Code, Codex, Cursor, Hermes-Agent, opencode, and others.
{
"mcpServers": {
"bilinc": {
"command": "python",
"args": ["-m", "bilinc.cloud_mcp"],
"env": { "BILINC_API_KEY": "bil_live_..." }
}
}
}
Eight tools — the core memory lifecycle, and nothing else:
| Tool | What it does |
|---|---|
commit_mem | Write durable agent state. Each write carries provenance — which run, tool, or operator produced it — and returns a version for optimistic concurrency. |
recall | Retrieve prior context and decisions before acting. profile selects retrieval quality; smart retrieval is that argument, not a separate tool. |
revise | Deliberately correct something already known. It never creates, so a correction stays distinguishable from an accidental overwrite. |
forget | Destructive. Remove obsolete state from active recall. A reason is required and is audited; the deleted value is never returned. |
status | Report the authenticated workspace, plan, capabilities, recall profiles, limits, and usage. Never billed. |
snapshot | Checkpoint a project before risky work, or list existing checkpoints. |
diff | Compare a checkpoint against another checkpoint or current state. Values are redacted by default. |
rollback | Destructive in execute mode. Restore a checkpoint through a free preview plus an explicitly confirmed execute. |
Operator and debug tooling — health probes, benchmarks, export/import, workspace replay — stays local-only, as do the epistemic read tools for claims, contradictions, and graph queries. The hosted adapter does not bundle local runtime internals.
Documented client setups: Claude Code · Codex · Cursor · any MCP client
from bilinc import CloudClient
client = CloudClient() # reads BILINC_API_KEY or a key saved by `bilinc login`
# Write, and keep the version for optimistic concurrency.
written = client.commit("agent.goal", {"ship": "reliable memory"}, memory_type="semantic")
results = client.recall("agent goal", limit=5)
# Correct something you already know. Fails if it does not exist.
client.revise("agent.goal", {"ship": "verifiable memory"},
reason="scope corrected", expected_version=written["entryVersion"])
# Checkpoint before risky work, then see what changed.
snapshot = client.create_snapshot(label="before-autonomous-run")["snapshot"]
client.diff(snapshot["id"])
# Drop obsolete state. A reason is required and is audited.
client.forget("agent.goal", reason="superseded by the planner service")
# Recover. Preview is free; execute is destructive and needs the token.
preview = client.rollback_preview(snapshot["id"], reason="undo bad agent run")
client.rollback(snapshot["id"], confirmation_token=preview["confirmationToken"],
reason="undo bad agent run")
client.status() # what can this key do?
client.health() # is the service reachable?
For server, CI, and hosted agent runtimes, store the key as BILINC_API_KEY.
bilinc status # authenticated plan, capabilities, limits, usage
bilinc health # public service health
bilinc commit --key agent.goal --value '{"ship":"reliable memory"}'
bilinc recall --query "agent goal"
bilinc revise --key agent.goal --value '{"ship":"verifiable memory"}' --reason "scope corrected"
bilinc snapshot create --label before-autonomous-run
bilinc snapshot list
bilinc diff --from-snapshot snap_...
bilinc forget --key agent.goal --reason "superseded by the planner service"
bilinc doctor
Rollback is two stages. Execute takes the token from the preview and never prompts interactively, so it stays safe inside automation:
bilinc rollback preview --snapshot snap_... --reason "undo bad agent run"
bilinc rollback execute --snapshot snap_... --reason "undo bad agent run" \
--confirmation-token <token-from-preview>
Useful first-run commands:
bilinc start
bilinc login --api-key bil_live_...
bilinc quicktest
bilinc mcp install
| Endpoint | Notes |
|---|---|
GET /api/cloud/health | Public service health. No key, no billing. |
GET /api/cloud/status | Authenticated capabilities for one key. Never billed. |
POST /api/cloud/memory/commit | Write. |
POST /api/cloud/memory/recall | Read. |
POST /api/cloud/memory/revise | Replace an existing memory. |
POST /api/cloud/memory/forget | Destructive. Reason required. |
GET /api/cloud/memory/snapshots | List checkpoints. Free. |
POST /api/cloud/memory/snapshots | Create a checkpoint. |
POST /api/cloud/memory/diff | Compare checkpoints. Free. |
POST /api/cloud/memory/rollback/preview | Free. Mints a confirmation token. |
POST /api/cloud/memory/rollback | Destructive. Requires that token. |
All hosted endpoints share https://bilinc.space. Authenticated memory operations require an
active Bilinc Cloud entitlement.
Send an Idempotency-Key header on any write you might retry: the same key with the same payload
replays the original result and is billed once, and the same key with a different payload is
refused with 409 idempotency_conflict.
Frozen regression receipt, LongMemEval-s cleaned retrieval fixture, 500 questions: Hit@5 98.0%, NDCG@5 0.913, with no LLM reranker and no paid API.
This is a frozen isolated retrieval guardrail — not a current hosted SLA, not an end-to-end agent score, and not a competitor ranking. Published memory-system scores use different metrics, datasets, and levels of LLM assistance, so they are not directly comparable. Present this receipt only with this isolated scope attached.
The repository keeps dated manifests with source state, dataset provenance, runner and metric semantics. These are traceability artifacts, not claims that Bilinc is universally first place.
| Lane | Publicly stored evidence | Scope |
|---|---|---|
| LongMemEval-s | frozen manifest | Isolated retrieval guardrail |
| AMB legacy v3 | current Modal manifests | Historical generic harness; not Vectorize AMB RAG/judge |
| Official LoCoMo | retrieval manifests | Retrieval component; not end-to-end QA/F1 |
| Evidence contract | validation rules | Hashes, limitations, and reproducibility boundaries |
For the engineering rationale, read Why vector search is not enough for agent memory.
Start with CONTRIBUTING.md. Use Discussions for design questions and roadmap feedback; use an issue for a reproducible bug or a scoped implementation task.
Security reports should follow SECURITY.md. Please do not include private memory values, API keys, or production logs in issues, pull requests, benchmark fixtures, or screenshots.
BUSL-1.1. See LICENSE.
Source-derived launch command. Check the maintainer’s required arguments and credentials before running:
uvx bilincMerge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.
{
"mcpServers": {
"io-github-atakanelik34-bilinc": {
"command": "uvx",
"args": [
"bilinc"
]
}
}
}Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.
Claude Desktop setup referencebilincpypiBilinc works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.
~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.~/.cursor/mcp.jsonRestart Cursor for changes to take effect..vscode/mcp.jsonReload VS Code window for changes to take effect.~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect..mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.