Ktzr Memory

MCP server providing persistent memory for AI legal assistants — remember facts between sessions, recall them with full-text search. Built for Polish law practice, works with any Claude deployment.

Part of the KTZR AI ecosystem.

⚠️ Security — protect your endpoint

Never expose this server without authentication. The /mcp endpoint gives any caller full read/write access to your memory database (client data, negotiation positions, case facts).

Recommended guards — pick one or combine:

Method	How
Secret token in URL	Deploy behind a reverse proxy that requires /mcp/<secret> and strips it before forwarding
IP allowlist	Cloud Run → --ingress=internal-and-cloud-load-balancing + Cloud Armor policy
VPC + IAP	Route through Identity-Aware Proxy; requires Google account auth
Cloud Run auth	Remove --allow-unauthenticated; use Authorization: Bearer $(gcloud auth print-identity-token) in the MCP connector

This repo ships with no auth by default (URL obscurity only) — suitable for local/testing use. Add a guard before any production deployment.

---

Tools

Tool	Description
remember(content, category, case_ref?, tags?)	Store a note in long-term memory
recall(query, category?, case_ref?, limit?)	Full-text AND search across stored notes
list_categories()	Summary of stored notes by category

Categories: klient · negocjacje · klauzule · ryzyka · precedensy · misc

Quick start (local, SQLite)

pip install .
legal-memory          # starts stdio transport — no server, no auth needed

Add to Claude Code (~/.claude/mcp.json):

{
  "legal-memory": {
    "type": "stdio",
    "command": "legal-memory"
  }
}

Local stdio mode never exposes a network port — no auth required.

Cloud Run deployment

# Build and deploy
gcloud run deploy claude-legal-memory \
  --source . \
  --region europe-west4 \
  --set-env-vars DATABASE_URL="postgresql+asyncpg://user:pass@/db?host=/cloudsql/project:region:instance" \
  --allow-unauthenticated   # ← add a guard here in production

# Connect Claude Code
# .claude/mcp.json:
# {
#   "legal-memory": {
#     "type": "http",
#     "url": "https://<your-cloud-run-url>/mcp"
#   }
# }

Configuration

Env var	Default	Description
DATABASE_URL	sqlite+aiosqlite:///legal_memory.db	Database connection string
PORT	8080	HTTP port (Cloud Run sets this automatically)

The server auto-detects the transport:

• K_SERVICE or PORT set → streamable-http (Cloud Run / remote)
• Neither set → stdio (local — recommended for single-user setups)

Database

Works with SQLite (local, zero config) and PostgreSQL (production).

Backend	URL format
SQLite	sqlite+aiosqlite:///legal_memory.db
PostgreSQL	postgresql+asyncpg://user:pass@host/dbname
Cloud SQL	postgresql+asyncpg://user:pass@/dbname?host=/cloudsql/project:region:instance

Related

• commercial-legal-pl — Polish commercial law skill for Claude (uses this server for persistent memory)
• legal-cite-pl — MCP server for verifying Polish & EU legal citations