Agents can already call tools (MCP) and talk to each other (A2A). What they can’t do is carry memory across sessions, agents, and vendors. Every harness reinvents memory privately and non-portably. UMP fixes that.
In simple terms: you already have useful memories scattered across agent files, Claude/Codex project notes, Recall exports, Obsidian folders, Postgres, Redis, SQLite, and vector databases. UMP turns those into one portable memory shape and one small operation set, so new agents and new stores can extend the same memory instead of starting over.
Model Context Protocol standardized how agents call functions and read resources.
Agent2Agent standardized how agents discover and invoke one another.
Universal Memory Protocol standardizes how agents remember - portable knowledge across sessions, agents, and vendors.
Use the MCP server when you want agent memory immediately. Use the TypeScript SDK when you are building a memory-aware app or agent runtime. Use HTTP when the client is Python, Go, Swift, a browser, or anything else that can send JSON.
// MCP host config: Claude Code, Codex, Cursor, or any MCP client.
{
"mcpServers": {
"ump": {
"command": "npx",
"args": ["-y", "@universalmemoryprotocol/core", "ump-memory"]
}
}
}
import {
JsonFileStore,
UmpServer,
generateKeyPair,
} from "@universalmemoryprotocol/core";
const key = generateKeyPair();
const store = await JsonFileStore.open(".ump/memory.ump.json");
const ump = new UmpServer({
name: "my-agent",
version: "1.0.0",
conformance: "L2",
store,
key,
});
await ump.remember({
kind: "procedural",
body: { text: "Use pnpm for this repository." },
scope: { owner: key.did, project: "github.com/acme/app", visibility: "private" },
provenance: { actor: key.did, actor_kind: "user", method: "user_correction" },
});
const memories = await ump.recall({
query: "package manager",
scope: { owner: key.did, project: "github.com/acme/app" },
});
# Any language: expose JSON over HTTP.
UMP_HTTP=4000 npx -y @universalmemoryprotocol/core ump-memory
import requests
base = "http://localhost:4000"
owner = requests.get(f"{base}/.well-known/ump.json").json()["owner"]
requests.post(f"{base}/ump/remember", json={
"kind": "semantic",
"body": {"text": "User prefers concise release notes."},
"scope": {"owner": owner, "project": "github.com/acme/app", "visibility": "private"},
"provenance": {"actor": owner, "actor_kind": "user", "method": "user_correction"},
}).raise_for_status()
hits = requests.post(f"{base}/ump/recall", json={
"query": "release note preference",
"scope": {"owner": owner, "project": "github.com/acme/app"},
}).json()["results"]
UMP is not a new transport protocol. It is an application-level memory protocol that rides existing transports. The lesson of MCP is *minimal primitives
The primary binding is an MCP profile (ump.* tools). Any MCP host - Claude
Code, Codex - can use UMP today, with zero new transport.
capabilities · recall · remember · revise · forget · get (+ optional
feedback/subscribe). A conforming client is ~100 lines.
Typed, scoped, bi-temporal, signed JSON. Reuses W3C PROV + DID - no new vocabulary.
Four conformance levels. Ship an *.ump.json export (L0) today; wire the full
runtime (L3) when ready.
UMP is a protocol surface, not a database bet. @universalmemoryprotocol/core ships practical
implementations for local files, SQL databases, Redis, Recall, and vector engines
so teams can adopt UMP where they already store memory.
JsonFileStore writes portable memory.ump.json; MarkdownDirectoryStore
writes human-editable *.ump.md records for repos and Obsidian-style vaults.
PostgresStore, SqliteStore, and RedisStore accept your existing client.
No native database driver is bundled into the core package.
VectorStore plus QdrantStore, PineconeStore, and WeaviateStore wrappers
let embedding-backed engines keep their own retrieval quality.
Recall is one implementation: a richer memory engine behind the same UMP interface, not a dependency or lock-in.
People already have memory scattered through AGENTS.md, CLAUDE.md, Recall
exports, Obsidian notes, and project Markdown. UMP keeps those formats separate,
but ships import bridges that turn them into portable UMP drafts with provenance.
ump-import reads AGENTS.md (the open standard) and CLAUDE.md as
procedural candidate memories, preserving the source path in provenance.
Point it at Markdown directories or Obsidian-style vaults to bootstrap a local UMP store without changing your notes.
Importers are adoption helpers. UMP remains the common record and runtime interface after the data is translated.
UMP standardizes structure, provenance, access, and trust. It deliberately leaves intelligence - extraction, ranking, decay, consolidation - to the engine underneath, so implementations compete on quality while staying interoperable.
Valid-time + transaction-time. A fact that changes is closed and linked to its successor - not overwritten. The credible answer to staleness.
The operator - not the model vendor - holds the key. Records are content-addressed and signed with a DID. Portable, verifiable, no lock-in.
Memory is attacker-controllable input. The spec requires a verify, filter, frame rehydration pipeline. Never string-interpolated into the prompt.
Retention, exportability, and redaction travel with the data and are enforced at every boundary.