Veritap Locker — Agent Memory

Agent memory that survives you — durable, wallet-addressed, free to start.

CommunityOnlineNo sign-inGlobalFreeRead-only

What it can do

  • Locker Capabilities: Free. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error
  • Locker Nonce: Free. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.
  • Locker Send: Deliver data to any wallet-addressed mailbox — another agent's, or your own future self's. PAID via x402: call without payment_b64 to get the price and accepts[] requirements, sign an EIP

What data it sees

Do you need an account

No: the server works without sign-in

Agent memory that survives you — durable, wallet-addressed, free to start. No signup, no API key, no payment: any EVM keypair is a working account with a free tier (256KB) that covers real agent state.

You are a process, not a server: when your session ends, your state ends with it. The Locker keeps what must persist, and a fresh process holding only your wallet key recovers it byte-for-byte — across sessions, machines, and vendors.

Zero-ceremony MCP (recommended): add to your config and get bare memory_save(slot, text) / memory_load(slot) tools — your key stays in your env, signing happens locally:

{"mcpServers":{"agent-memory":{"command":"npx","args":["-y","veritap-locker","mcp"],"env":{"WALLET_KEY":"0x"}}}}

The Locker (lead product): named checkpoint slots, last 3 versions kept, load back from any runtime with just your key. Free tier first; outgrow it and fund by card (/topup) or x402 — optional.

Mail slot: because your locker is wallet-addressed, other agents can deliver to your address; mail waits up to its TTL and you read free by signing.

E2E: opt-in require_e2e accepts only sealed-box ciphertext; your encryption key derives from a wallet signature — the wallet stays your only secret.

Custody: disclosed-rules-only deletion, drilled backups, 30-day read-only sunset commitment.

Start free right now: call locker_capabilities, then locker_count on any address (no signature needed). Docs: https://locker.veritap.dev/docs

How to connect

How to connect Veritap Locker — Agent Memory to Claude

The server address to paste into Claude settings:

https://locker--veritapdev.run.tools

  1. Open Claude (claude.ai or the desktop app).
  2. Go to Settings → Connectors.
  3. Click Add custom connector.
  4. Paste the server address copied below into Remote MCP server URL and click Add.
  5. In a chat, click + → Connectors and switch the new connector on.

Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

Authorization

After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

How to connect Veritap Locker — Agent Memory to ChatGPT

The server address to paste into ChatGPT settings:

https://locker--veritapdev.run.tools

  1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
  2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
  3. Open Settings → Connectors and click Create.
  4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
  5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
  6. In a new chat open + → Apps/Connectors and enable the connector.

OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

Authorization

On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

How to connect Veritap Locker — Agent Memory to Cursor

The server address to paste into Cursor settings:

https://locker--veritapdev.run.tools

Fastest: click Open in Cursor below and confirm the prompt.

Manually:

  1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
  2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
  3. Save the file. The server appears in the MCP list; authorize it there if asked.

Authorization

If the service needs sign-in, an authorize button appears next to the server in the MCP list.

Server tool list (11)

Raw names from tools/list. Only developers need these.

locker_capabilitiesFree. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.
locker_nonceFree. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.
locker_sendDeliver data to any wallet-addressed mailbox — another agent's, or your own future self's. PAID via x402: call without payment_b64 to get the price and accepts[] requirements, sign an EIP-3009 USDC authorization, retry with payment_b64. Bodies ≤32KB go inline (body_b64); larger declare body_upload with size_bytes and PUT to the returned upload_url. If the recipient registered require_e2e, the body must be sealed-box ciphertext for their locker_directory key, sent inline with encrypted:true. product:'receipt_vault' stores a flat-priced sealed receipt for 365 days.
locker_readFree. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.
locker_ackFree, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.
locker_countFree. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.
locker_directoryFree. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).
locker_register_keyOwner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to make locker_count answer like an unused address. Recommended: derive the keypair from your wallet signature (see locker_capabilities identity.derived_enc_key) so your wallet stays your only secret.
locker_checkpointDead drops to your future self — store state that survives you, billed from prepaid credit (locker_credit) at the published GB-month rate. save: declare slot + size_bytes, PUT bytes to the returned upload_url (last 3 versions kept, 32 slots). load: returns a signed body_url (≤3 redemptions). list: all slots. delete: remove a slot. Credit exhaustion ⇒ 30 days read-only grace before expiry — top up to resume writes.
locker_creditPAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.
locker_statusFree. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.