Cortex

by OBELYTHprivate memory server

The six tools same corpus, every surface

One MCP server, six tools, reachable only with the bearer token or the connector secret. This page documents them; it does not expose them.

brain_askthe retriever

Fetches the whole live corpus in one tarball, hands a reader model the actual notes, and then checks the quote it cited against the file — deterministically, no model in that loop.

returns: an answer, a verdict stamp, and the evidence line it was proven against

brain_corpusthe direct read

Returns the notes into the calling conversation instead, so the caller reads the material itself. No model is called and nothing leaves the brain's own storage.

returns: the live corpus, or the notes most relevant to a question

brain_contextthe boot call

The session opener: the profile, the index, and the last week of log entries, in one call.

returns: profile · index · recent log

brain_readone note

Reads a single note by path. Paths are allowlisted by shape, so only notes are reachable.

returns: the note, verbatim

brain_writethe commit

Creates, replaces, or appends to a note. Every write is a git commit, and the commit SHA comes back — a save without a SHA did not happen.

returns: path and commit SHA

brain_capturezero friction

Appends a timestamped entry to today's log. The capture ritual from any device: say it, and it is committed.

returns: today's log path and commit SHA

The read path

Two ways to the same corpus. brain_ask is for when you want an answer: a reader model reads the actual notes and cites its source, and a deterministic verifier stamps the citation — VERIFIED, SUPERSEDED, PARTIALLY VERIFIED, NOT IN BRAIN or UNVERIFIED. brain_corpus is for when you want the material: the notes land in the calling conversation and the caller does its own reading. Ranking a generated index was retired after it measured 55% against reading the text at 97%.

Auth

Two paths onto one bearer-gated handler. A bearer token at /api/mcp for clients that send headers; a secret URL for clients that cannot. Both fail closed: a bad bearer gets a standard 401; a wrong path secret gets an empty 404 — the secret door does not advertise that anything lives there.

CORTEX BY OBELYTH — DATA. INFRASTRUCTURE. ASSURED.