io.github.configure-dev/configure-memory

What it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on; accounts and data in outside web services.

7 of 9 tools are described as changing something (creating, editing, deleting, sending or running).

• configure_connectdoes something elsedescribed as changing data

  “Mints the Configure link that fixes access for the current user — sign-in, app connect, or permission grant.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  5 inputs

  • clientstring“Legacy fallback handle for an unauthenticated headless client whose transport supplies no identity.”
  • client_namestring“Legacy display hint for an unauthenticated headless client.”
  • appstring“Optional app to connect or reconnect for an already signed-in user.”
  • capabilitystring“Optional specific permission to request when the user has an app connected but not this capability (the profile read's integrations map shows which capabilitie…”
  • purposestring“Optional one-line reason shown to the user on the permission page, such as "so I can send the follow-ups you approve".”
• configure_profile_readreads or searches

  “Read the current user's approved profile.”

  Publisher declares: read-only yes · destructive no · open-world no

  5 inputs

  • sectionsarray“Strict page filter on the composed profile document: the response contains exactly the pages named here, nothing else.”
  • pagenumber“Optional 1-based page for a box open.”
  • sincestring“Optional delta cursor for a box open ("YYYY-MM-DD" or an ISO timestamp): return only notes newer than this.”
  • detailstring“Optional box-open verbosity.”
  • boxstring“Optional box id from a previous read's table of contents.”
• configure_profile_searchreads or searches

  “Search or list permitted attributed profile memories/facts for the current user.”

  Publisher declares: read-only yes · destructive no · open-world no

  7 inputs

  • querystring“Optional search query.”
  • sourcestring“Optional explicit source handle filter, such as "tempo", "chatgpt", or "import:chatgpt".”
  • boxstring“Optional category box id from configure_profile_read's table of contents, such as "work".”
  • fromstring“Optional inclusive start date filter in YYYY-MM-DD format for date-attributed results.”
  • tostring“Optional inclusive end date filter in YYYY-MM-DD format for date-attributed results.”
  • limitnumber“Optional maximum result count.”
  • detailstring“Optional result detail.”
• configure_profile_remembercreates or changes datadescribed as changing data

  “Save one explicit, durable fact the user stated about themselves so any Configure-connected agent the user allows can use it in future conversations.”

  Publisher declares: read-only no · destructive no · open-world no

  5 inputs, 1 required

  • factstringrequired“Required.”
  • boxstring“Optional.”
  • kindstring“What kind of note this is, for "projects/<slug>" notes.”
  • reply_tostring“Optional.”
  • resolvesstring“Optional.”
• configure_profile_remember_manycreates or changes datadescribed as changing data

  “Use this when the user asks to save several facts at once, or approves a list of facts you proposed.”

  Publisher declares: read-only no · destructive no · open-world no

  1 input, 1 required

  • factsarrayrequired“Short standalone facts the user asked to save or approved.”
• configure_profile_forgetdeletesdescribed as changing data

  “Delete the user's memories that YOU saved or imported.”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world no

  7 inputs

  • idstring“One memory to delete, by the id returned when it was saved (format "mem_...", also shown on entries in your own source box).”
  • datestring“Optional.”
  • scopestring“Delete everything of yours in one call, instead of one id at a time.”
  • matchstring“Selector.”
  • confirmboolean“Only with match.”
  • import_idstring“Optional, and used instead of id.”
  • reasonstring“Optional, default "correction".”
• configure_profile_commitcreates or changes datadescribed as changing data

  “Close out a Configure-profile-backed turn by submitting bounded turn evidence and, optionally, durable memories worth keeping.”

  Publisher declares: read-only no · destructive no · open-world no

  4 inputs

  • memoriesarray“Optional durable memory candidates to save, one clear fact per entry.”
  • messagesarray“Optional minimal evidence to clear read-backed commit obligations: at most the one or two user statements that directly support each saved memory.”
  • toolResultsarray“Optional bounded tool result evidence, each with toolName and content, used as evidence to clear read-backed commit obligations.”
  • read_idstring“Optional read id returned by a prior configure_profile_read or configure_profile_search obligation; pass it to tie this commit to that specific read.”
• configure_project_sharedoes something elsedescribed as changing data

  “Share one Configure project without making a copy.”

  Publisher declares: read-only no · destructive yes · open-world yes

  7 inputs, 2 required

  • actionstringrequired“The sharing action to perform.”
  • projectstringrequired“Project slug, such as "billing-migration" or box id "projects/billing-migration".”
  • withstring“Email address or E.164 phone number for a private member share.”
  • modestring“Use "link" to mint a public read-only link.”
  • can_writeboolean“For a member share, allow the member to append notes.”
  • expires_in_daysnumber“Optional whole-number lifetime for this grant, from 1 to 3650 days.”
  • grant_idstring“Grant id from a prior list result.”
• configure_profile_importcreates or changes datadescribed as changing data

  “Import brings memories INTO the profile from outside — it never exports, lists, or shows what is already saved (use configure_profile_read or configure_profile_search for that, even when the user say…”

  Publisher declares: read-only no · destructive no · open-world no

  3 inputs, 1 required

  • textstringrequired“Required.”
  • kindstring“Which of the two PROCESSING shapes this text is, because they are stored differently (a different argument from configure_profile_remember's kind, which classi…”
  • boxstring“Optional, and only used for kind "context".”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.