Self-hosted, end to end
Run it on your laptop, a home server or a VPS. One process carries the app, the API, MCP and live updates on one port; the state database is a local SQLite file with no network port.
Privacy & security
Your memory. Your machine.
Memora is self-hosted: no cloud account, no third party holding your notes. You decide which agent sees what, from where, and with which tools.
Your files stay Markdown
Notes are plain Markdown files in a folder you choose, git-backed so every note has a history you can diff and restore. Nothing is locked in.
Privacy per agent
Limit any note or folder: who can see it?
hermesClaude CodeCursorChatGPTCodex CLIGemini CLIWindsurfClaude Desktop
Scoped keys
One key per agent with scopes and a tool list. Write tools need the write scope. Turn a key off, make a new one or delete it at any time.
mcpreadwriteadmin
35 of 74 toolsAll tools
Access rules
Allow or block by address, CIDR, range or domain. First match wins.
1192.168.1.0/24Allow
2*.codrihub.techAllow
3203.0.113.7Block
·Everything elseAllow
Sessions & devices
See every signed-in device, rename it, sign it out, or sign out all other devices. Changing your password signs out the others.
Safe first run
An unclaimed instance cannot be taken over by whoever finds the port: the console opens a short setup window with a one-time code (/web) and you finish in the browser.
Under the hood
Secure defaults.
From the Memora README. Terminate TLS at a reverse proxy before exposing Memora to the internet.
Hashed secrets
The owner password is hashed with argon2id. API keys and session ids are stored only as SHA-256 hashes; a key is shown once.
Hardened sessions
Session cookies are HttpOnly and SameSite=Lax, cookie writes are checked against the request origin, and pages use a nonce-based Content-Security-Policy.
Rate limits
Login and setup are rate limited with cooldowns; a wrong setup code closes the setup window.
No self-lockout
Forwarding headers are trusted only from loopback and trusted proxies. Loopback always stays allowed, so access rules cannot lock you out.
See it in the app
Control without the guesswork.
Every rule and permission is a screen, not a config file. And every action shows up in Activity.
Open source · v1.3.0Give your AI
Give your AI
a memory that stays.
Self-host Memora in minutes. Your notes stay Markdown, your agents share one memory, and you decide who sees what.