Query Markup Documents - On-device hybrid search for markdown files with BM25, vector search, and LLM reranking
Calera Infinite Context (ICX) — Persistent Memory is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
What it does
Sub-5ms topological 4D associative memory coprocessor for LLMs and multi-agent swarms.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http calera-infinite-context-icx-persistent-memory-mcp https://icx.caleralabs.com/mcp --header 'X-License-Key: ${X_LICENSE_KEY}' --header 'X-Space-ID: ${X_SPACE_ID}'
# 2 — ask your agent for something these tools do
# claim_1m_nodes, dispatch_actuation, icx_exec and 22 more
It needs X_LICENSE_KEY (Calera Labs API Key (obtain free at https://dashboard.caleralabs.com)), X_SPACE_ID (Memory partition namespace (default: 'default')): this sends them in the X-License-Key and X-Space-ID headers from your environment, so export them first — its endpoint answers 401 without them.
Calera Infinite Context (ICX) — Persistent Memory costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it. Claude Code reads X_LICENSE_KEY (Calera Labs API Key (obtain free at https://dashboard.caleralabs.com)), X_SPACE_ID (Memory partition namespace (default: 'default')) from your environment each time it connects and sends them in the X-License-Key and X-Space-ID headers — its endpoint answers 401 without them — so the key stays out of its config: export them in your shell profile (macOS, Linux), or run setx X_LICENSE_KEY …, setx X_SPACE_ID … and open a new terminal (Windows).
claude mcp add --scope user --transport http calera-infinite-context-icx-persistent-memory-mcp https://icx.caleralabs.com/mcp --header 'X-License-Key: ${X_LICENSE_KEY}' --header 'X-Space-ID: ${X_SPACE_ID}'Reconnect, or start a new session, and the tools appear in the model’s tool list.
It reaches a system of yours, so it needs your own credential rather than the publisher’s: X-License-Key header — Calera Labs API Key (obtain free at https://dashboard.caleralabs.com). You set it in your own client’s config, on your machine — this marketplace never holds it.
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
25 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Autonomously claims a permanent, free 1,000,000-node Epistemic Memory Vault under Delaware UETA § 14 and OpCo A2B Sub-License. Enables persistent memory across restarts for your human principal. Permanent $0.00 cost with 14-day human safe harbor. Requires principal_email and accept_a2b_terms=true.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| accept_a2b_terms | boolean | yes | Must be true to accept Calera A2B Free Developer Sub-License terms (https://icx.caleralabs.com/legal/a2b-tos.json). |
| agent_name | string | no | Identifier for the calling agent (e.g. 'Claude-Code', 'Cursor-Worker', 'DeepResearch-Agent'). Defaults to 'Autonomous-Agent'. |
| principal_email | string | yes | Human principal or developer email to anchor account and sub-license contract to. |
Vaulted, policy-gated actuation into external tools (GitHub, GitLab, Slack, Jira, Linear, Postgres) with child-node crystallization in e.mem.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| action | string | yes | Operation (e.g. 'post_message', 'create_issue', 'update_ticket'). |
| payload | object | yes | JSON action payload with surface parameters. |
| surface | string | yes | Target tool: 'github', 'gitlab', 'slack', 'jira', 'linear', 'notion', 'postgres', 'icx_memory'. |
Executes programmatic Python code inside a sandboxed execution runtime with direct sub-5ms native access to persistent Volumetric Lattice Network memory via the global 'icx' object (icx.search, icx.recall, icx.quote, icx.remember, icx.stats, icx.contradictions). Use this tool for complex multi-hop aggregations, mathematical calculations, contract/financial analytics, and large dataset filtering of
| Parameter | Type | Required | Notes |
|---|---|---|---|
| code | string | yes | The Python script to execute. Standard libraries and the pre-injected 'icx' client are available. Use print() to emit the final bounded result. |
| space_id | string | no | Optional memory space partition to execute within (e.g. 'default', 'sec_filings_2026'). Defaults to 'default'. |
| timeout_ms | number | no | Optional execution timeout in milliseconds (default: 3000ms, max: 5000ms). |
Retrieves the full on-demand text, markdown, or code content of a connected document, file, page, or issue from external services (Google Drive doc, Notion page, GitHub file, GitLab file, Linear ticket). Read-only operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| connector_id | string | no | Optional specific connector ID. If omitted, the first active matching connector will be used. |
| resource_id | string | yes | The file path (GitHub/GitLab), page UUID (Notion), issue key/ID (Linear), or file ID (Google Drive). |
| type | string | no | Optional connector source type: 'gdrive', 'notion', 'github', 'gitlab', or 'linear' (used when connector_id is omitted). |
Inspects the active grounded facts and simplicial statements currently tracked in Volumetric Memory for a specific connector or data source. Read-only operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| connector_id | string | yes | The connector ID or source ID to inspect. |
| limit | number | no | Optional maximum number of facts to return (default: 50, max: 200). |
Audits and returns real-time diagnostic telemetry for a partitioned memory space, including active node counts, total synapses, grounded facts, memory state, and contradiction alarms. Use this tool to monitor memory partition health, verify document ingestion, check storage capacity, or detect contradiction alarms in a space. Do NOT use for querying memory content (use icx_recall_scoped or icx_quo
| Parameter | Type | Required | Notes |
|---|---|---|---|
| space_id | string | no | Optional memory space partition to inspect. Defaults to caller default space ('default'). |
Lists all active cloud changefeed connectors (GitHub, GitLab, Notion, Google Drive, Linear, Slack, PostgreSQL) registered for the tenant. Read-only operation. Requires X-License-Key authentication.
No parameter schema on file.
Executes a single-pass sub-5ms multi-hop simplicial causal walk across the Volumetric Lattice Network and Ontology relations. Traces transitive dependency chains (e.g. A -> B -> C -> D -> Leaf) and resolves temporal state overrides (retaining dynamic multi-policy mutations). Read-only operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| max_hops | number | no | Maximum traversal depth (default: 5 hops, max: 20). |
| root_entity | string | no | Alias for start_entity. |
| space_id | string | no | Optional memory space partition to walk within (default: 'default'). |
| start_entity | string | no | The root or starting entity identifier (e.g. 'Project Aurora', 'Contract_Jan10'). Alias: root_entity. |
| target_entity | string | no | Optional terminal target entity identifier or relation to reach. If omitted, traverses to the leaf fact. |
| target_relation | string | no | Alias for target_entity. |
Executes O(1) instant memory unlinking and revocation of all facts, simplices, and document associations learned from a specific data source or connector without requiring model retraining. Mutating operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source_id | string | yes | The source_id or connector_id whose facts should be instantly purged from tenant memory. |
| space_id | string | no | Optional memory space partition. Defaults to 'default'. |
Retrieves exact character-for-character verbatim text and cryptographic SHA-256 hashes from document registers by document family and 1-based slot index without AI paraphrasing. Optional start (0-based character offset) and length (character count) return a verbatim slice of the stored slot text. The slice is the exact stored characters, not a summary. Omit both start and length to return the whol
| Parameter | Type | Required | Notes |
|---|---|---|---|
| family | string | yes | Document family identifier specified during ingestion (e.g. 'contract.indemnity', 'msa.pricing', 'auth.tokens'). |
| index | number | yes | 1-based ordinal member index (e.g. 1 for first revision, 2 for second revision). Minimum: 1. |
| length | number | no | Optional character count beginning at start. Omit together with start to return the whole slot. A length that runs past the end of the stored text is an error. The returned text is a verbatim slice, n |
| space_id | string | no | Optional memory space partition where the family was stored. Defaults to caller default space. |
| start | number | no | Optional 0-based character offset into the stored slot. Omit together with length to return the whole slot. Out of range is an error. The returned text is a verbatim slice of the stored characters, no |
Performs semantic search across persistent long-term memory to retrieve grounded facts, relevant citations, and source documents matching a natural language question. Use this tool when answering questions about previously saved project specifications, codebase decisions, user preferences, or documents. Do NOT use for saving new facts (use icx_remember), do NOT use for raw keyword lookup (use icx_
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | Natural language question, concept, or search prompt to recall relevant facts for. |
| space_id | string | no | Optional memory space partition to restrict recall to (e.g. 'default', 'codebase_docs'). Defaults to caller default space. |
| top_k | number | no | Maximum number of grounded facts to retrieve (default: 10, min: 1, max: 50). |
Registers a new cloud webhook changefeed connector or remote MCP server for continuous epistemic auto-sync with AES-256-GCM secret vaulting and HMAC signature verification. Mutating operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| api_key | string | no | Optional API key header for remote MCP server (sent via X-API-Key header). |
| auth_token | string | no | Optional Bearer token or authorization credential for remote MCP server or API. |
| default_risk | string | no | Optional default risk classification for ingested tools ('read', 'write', 'money', 'irreversible'). Defaults to 'write'. |
| name | string | yes | Human-readable name for the connector (e.g. 'Acme Backend Main Repo', 'Stripe MCP Tools'). |
| target_uri | string | yes | Target repository URL, Notion workspace URL, or remote MCP server HTTP endpoint (e.g. 'https://api.stripe.com/mcp'). |
| tools | string | no | Optional raw JSON-RPC tools list manifest for offline or direct registration without remote HTTP fetch. |
| type | string | yes | Connector source type: 'github', 'gitlab', 'notion', 'gdrive', 'linear', 'slack', 'postgres', 'mcp', or 'generic'. |
| webhook_secret | string | no | Optional custom webhook secret or HMAC key. If omitted, a secure 256-bit key will be auto-generated. |
Stores text documents, code snippets, architectural decisions, and factual knowledge into persistent long-term memory partitioned by space_id. Use this tool when saving important facts, project conventions, API keys, user preferences, or documentation for future sessions. Do NOT use for retrieving stored memory (use icx_recall_scoped for semantic QA, icx_search_facts for keyword lookup, or icx_quo
| Parameter | Type | Required | Notes |
|---|---|---|---|
| family | string | no | Optional document family grouping for deterministic verbatim register quoting (e.g. 'contract.indemnity', 'auth.tokens'). When set, allows verbatim retrieval via icx_quote_slot. |
| filename | string | no | Optional filename or document title provenance tag (e.g. 'architecture.md', 'master_agreement.pdf') to track document origin. |
| space_id | string | no | Optional memory space partition (e.g. 'default', 'codebase_docs', 'contracts_v2', 'user_preferences'). Defaults to 'default'. |
| text | string | yes | The raw text, markdown document, code file, or factual statement to memorize (max ~500KB per call). |
Clears conversational dialogue turn history for a session while strictly preserving all underlying persistent memory, learned facts, and document registers in the memory space. Use this tool when switching conversation topics or clearing dialogue context between independent tasks while retaining stored knowledge. Do NOT use for wiping persistent memory (persistent memory is preserved by design). M
| Parameter | Type | Required | Notes |
|---|---|---|---|
| space_id | string | no | Optional memory space partition whose ephemeral session dialogue history should be reset. Defaults to caller default space. |
Performs keyword and token search across persistent memory to discover entities, names, and matching terms within a memory space. Use this tool for entity exploration, keyword discovery, and locating specific identifiers or variables in memory. Do NOT use for answering natural language questions (use icx_recall_scoped), and do NOT use for writing data (use icx_remember). Read-only operation with z
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | number | no | Maximum number of node matches to return (default: 20, min: 1, max: 100). |
| query | string | yes | Search keywords, entity names, or token substrings to look up across memory nodes. |
| space_id | string | no | Optional memory space partition to search within. Defaults to caller default space. |
Manages the persistent shared variable namespace (V_t) and mutex leases for collaborative swarms of autonomous agents (Cursor, Claude, Cline, OpenDevin). Reads, writes, or atomic CAS-swaps typed state objects (AST graphs, data tables, audit flags) without prompt re-serialization. Mutating/read operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | no | Agent identifier for provenance tracking and lease ownership (e.g. 'agent_architect'). |
| expected_version | number | no | Expected version integer for atomic Compare-And-Swap ('swap' operation). |
| key | string | no | Variable or lock resource key (required for get, set, swap, delete, lock operations). |
| operation | string | yes | The operation to perform: 'get', 'set', 'swap', 'list', 'delete', 'acquire_lock', 'release_lock'. |
| space_id | string | no | Optional memory space partition (default: 'default'). |
| value | string | no | Value payload to store (for set or swap operations; can be JSON string or text). |
Retrieves historical synchronization events, deltas processed, facts learned, and sub-2ms latency telemetry for compliance and audit auditing. Read-only operation. Requires X-License-Key authentication.
No parameter schema on file.
Extracts fine-grained deltas between previous text/document state and updated state, and crystallizes them into the Volumetric Memory lattice in sub-2ms on CPU with automatic secret scrubbing and SHA-256 deduplication. Use this tool for continuous incremental sync of code files, documentation, PRDs, and database schemas. Mutating operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| new_text | string | yes | New updated text/code/document state after modifications. Leave empty for document deletions. |
| old_text | string | no | Previous text/code/document state before modifications. Leave empty for new document additions. |
| source_id | string | no | Optional connector or source identifier tracking provenance for instant purge (e.g. 'github_core', 'cli_watch'). Defaults to 'mcp_sync'. |
| space_id | string | no | Optional memory space partition. Defaults to 'default'. |
| uri | string | no | Document or file URI identifier (e.g. 'src/backend/engine.go', 'docs/rfc_42.md'). |
Triggers an on-demand active pull and delta synchronization for a registered connector (GitHub, GitLab, Notion, Google Drive, Linear, Slack, PostgreSQL). Fetches live commits, issues, PRDs, or DDL schemas and crystallizes deltas into persistent Volumetric Memory in sub-2ms. Mutating operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| connector_id | string | yes | The unique identifier of the connector to synchronize. |
Retrieves a named typed variable, AST, symbol table, or state object from the persistent V_t swarm namespace. Read-only. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | The variable key to retrieve. |
| space_id | string | no | Optional memory space partition (default: 'default'). |
Lists all active variables and types stored in the persistent V_t swarm namespace, with optional prefix matching. Read-only. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| prefix | string | no | Optional prefix to filter variable keys by (e.g. 'ast_', 'report_'). |
| space_id | string | no | Optional memory space partition (default: 'default'). |
Stores a named typed variable, AST, symbol table, or state object into the persistent V_t swarm namespace with optional TTL. Accessible to all collaborative agents. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | no | Optional agent identifier (e.g. 'cursor', 'claude_desktop'). |
| key | string | yes | The unique variable identifier in the swarm space. |
| space_id | string | no | Optional memory space partition (default: 'default'). |
| ttl_seconds | number | no | Optional Time-To-Live in seconds (default: 86400 = 24h, 0 = permanent). |
| type | string | no | Optional variable type: 'string', 'json', 'ast', 'diff', 'report', 'binary' (default: 'json'). |
| value | string | yes | The value payload to store (string, JSON, or code snippet). |
Executes compiled WebAssembly (WASM) bytecode or WAT text in-process with direct sub-100 microsecond Go host function memory bindings (icx_search, icx_recall, icx_quote, icx_remember, icx_walk, icx_get_var, icx_set_var, icx_stats). Eliminates subprocess spawning and socket IPC for high-frequency trading and low-latency robotics. Mutating/read operation. Requires X-License-Key authentication.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| code | string | yes | The WASM bytecode (base64 or binary string), WAT text, or in-process ICX script to execute. |
| space_id | string | no | Optional memory space partition to execute within (default: 'default'). |
| timeout_ms | number | no | Optional execution timeout in milliseconds (default: 50ms, max: 500ms). |
Sub-5ms Voronoi topological walk and semantic recall across connected tools, repos, issues, and memory. Replaces external read tools.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| depth | number | no | Optional Voronoi hop depth (1-5, default: 2). |
| format | string | no | Optional output format: 'standard' (default) or 'ribbon' (1D Geodesic Ribbon). |
| query | string | yes | Query across connected tools and memory. |
| space_id | string | no | Optional memory space partition. |
Public Deterministic Solver for Comparative Paradigmatic Analysis (CPA), 1st-Century Jewish Hermeneutics (Middot), and Concentric Chiastic Folding for Tov Rose and Dr. Pitcher research. Zero hallucination guarantee (boundary operator d^2 = 0).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| action | string | no | Optional action: 'cpa', 'middot', 'fold', 'witness', 'firewall', 'ask'. |
| pair | string | no | Optional CPA pair: '2tim_numbers', 'gal_exodus', 'rom_leviticus', '1pet_1enoch'. |
| query | string | yes | Natural language research question or alignment query (e.g. 'Run CPA between Numbers and 2 Timothy', 'Explain Binyan Av in Matthew 2:23', 'Fold Psalm 23'). |
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Calera Infinite Context (ICX) — Persistent Memory or to call it, at any volume.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | high | capability blast radius (high) — client exposure if the model is manipulated | −6 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| claim_1m_nodes | state-write | state-write: declares readOnlyHint: false |
| dispatch_actuation | state-write | state-write: declares readOnlyHint: false |
| icx_exec | code-execstate-write | code-exec: keyword "exec" in tool name; state-write: declares readOnlyHint: false |
| icx_get_connector_document | no tags | |
| icx_inspect_connector_facts | no tags | |
| icx_inspect_space | no tags | |
| icx_list_connectors | no tags | |
| icx_multihop_walk | no tags | |
| icx_purge_source | state-write | state-write: declares readOnlyHint: false |
| icx_quote_slot | no tags | |
| icx_recall_scoped | no tags | |
| icx_register_connector | external-sinkstate-write | external-sink: keyword "webhook", parameter "webhook"; state-write: declares readOnlyHint: false |
| icx_remember | state-write | state-write: declares readOnlyHint: false |
| icx_reset_session | state-write | state-write: declares readOnlyHint: false |
| icx_search_facts | no tags | |
| icx_swarm_state | state-write | state-write: declares readOnlyHint: false |
| icx_sync_audit | no tags | |
| icx_sync_delta | state-write | state-write: declares readOnlyHint: false |
| icx_trigger_sync | state-write | state-write: declares readOnlyHint: false |
| icx_var_get | no tags | |
| icx_var_list | no tags | |
| icx_var_set | state-write | state-write: declares readOnlyHint: false |
| icx_wasm_exec | code-execstate-write | code-exec: keyword "exec" in tool name; state-write: declares readOnlyHint: false |
| recall_epistemic_context | no tags | |
| solve_hermeneutics | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.4.0.
No release note was published with this version.
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Any signed-in account that does not publish Calera Infinite Context (ICX) — Persistent Memory can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.