MCP profiles

MCP is a tool transport, not proof that a model received returned content.

Embedded memory server

atmem mcp --db /path/to/memories.db --subject demo-user

This process accesses the specified database. Its launcher must authenticate the user and select an authorized subject. Do not take the subject from prompt text. See the tool inventory.

Host control server

atmem control mcp

A custom host uses the governed preparation and lifecycle protocol. It must report actual model-input delivery, not just that it fetched context. See the generic adapter contract.

Operator server

atmem control operator-mcp

Reserve this for a trusted operator process. It exposes governance operations; do not hand its capabilities to an ordinary agent merely to enable retrieval.

Failure boundary

Identity mismatch, revoked access or an invalid delegated response must not broaden scope. Investigate the recorded withholding/failure reason instead.