Compartment: an encrypted, fully offline memory server (io.github.MaxFreedomPollard/compartment)

[MaxFreedomPollard]

Compartment is a memory server for agents where the whole vault, embedding vectors included, is encrypted at rest under the user's passphrase, and the server cannot open a socket: a runtime guard aborts the process on any network attempt, and CI runs the test suite under it on Linux, macOS and Windows. The embedding model (bge-small, int8 ONNX) ships inside the wheel, the index lives in RAM, and a hybrid vector + keyword search answers in about 12 ms.

It is in the registry as io.github.MaxFreedomPollard/compartment (PyPI compartment, uvx compartment serve). Fourteen tools, every one titled and carrying readOnlyHint or destructiveHint, so a client can tell readers from writers before calling anything. One vault is shared by every MCP client on the machine, each under its own caller identity and namespace ACL.

Two things registry maintainers might find useful: the server lists its tools and answers memory_status with lock-state guidance before any vault exists, so install-time probes succeed; and it runs under both mcp 1.x and 2.x from one wheel.

Repo: https://github.com/MaxFreedomPollard/Compartment