Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.
willow-memory/willow-mcp is an MCP server distributed on github, maintained by willow-memory, tracked here since August 2026. It has shipped 126 releases (currently 2.33.0) and exposes 152 tools. Tools include agent_clear, agent_dispatch_result, agent_route, agent_seed_mirror, code_graph_explain, code_graph_impact, and 146 more. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised 3 review prompts — dangerous code, exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.
Since the previous scan on 2026-09-10: 8 tools added.
full security breakdown →-
agent_clear -
agent_dispatch_result -
agent_route -
agent_seed_mirror -
code_graph_explain -
code_graph_impact -
code_graph_index -
code_graph_search -
code_graph_suggest -
code_graph_walk -
commitment_acknowledge -
commitment_ingest -
commitment_list -
commitment_surface -
context_expire -
context_get -
context_list -
context_save -
diagnostic_summary -
dispatch_accept
| version | date | src |
|---|---|---|
| 2.33.0 | 2026-09-10 | pypi |
| 2.32.0 | 2026-09-10 | pypi |
| 2.31.1 | 2026-09-10 | pypi |
| 2.31.0 | 2026-09-09 | pypi |
| v2.31.0 | 2026-09-09 | github |
| 2.30.1 | 2026-09-09 | pypi |
| v2.30.1 | 2026-09-09 | github |
| 2.30.0 | 2026-09-09 | pypi |
| v2.30.0 | 2026-09-09 | github |
| 2.29.0 | 2026-09-09 | pypi |