Kit memory demo · hosted MCP servers
Three live, public, read-only MCP servers, each backed by a running Kit. Kit is an identity substrate for AI agents: not another agent, not a memory API, but the durable, local-first self beneath your tools, holding memory with provenance and context that outlives any context window, consolidating while it dreams. It has no chat window of its own; it lives under the ones you already use. Point your agent at them and ask questions the model cannot answer from training. No signup; the bearer keys below are deliberately public.
Why fiction: none of it exists in any training corpus, so a correct citation is provably retrieval. Why the two archives are separate servers: the central mystery (who leaked the Fluffington affair?) was split across them on purpose; no single entry states the answer, the full corroborated case assembles only across both, and your agent is the bridge. Why the real one: so the same machinery is checkable against the living public record.
Quickstart
Claude Code:
claude mcp add --transport http kit-papers https://demo-mcp.kit-project.com/mcp \
--header "Authorization: Bearer kbr_live_Kh9eO_ZfLldveFf1KXJEEvepfOpdgRqf7KoDDU3rB18"
claude mcp add --transport http kit-mews https://mews-mcp.kit-project.com/mcp \
--header "Authorization: Bearer kbr_live_UN8-2LUlKmP2uxWQB5vpn-fzkJIuRb5zmq-apQeTU7U"
claude mcp add --transport http kit-case-file https://real-mcp.kit-project.com/mcp \
--header "Authorization: Bearer kbr_live_ISWsqW39NkqT659FEkQjv0OjJDmyD4O3wx3wcCfA03c"
Any MCP client: see examples/mcp.json.
Then tell your agent: "Call wake on each server, then work out who leaked the Fluffington affair, and cite every step." Or the real-world flagship: "Should we still use the memory_ballast extension, and why did the recommendation change?"
Keys rotate without notice. The authoritative copy of each key is printed in that kit's own map: demo llms.txt, mews llms.txt, real llms.txt. If a call starts failing, re-read the map.
No MCP client? No problem
Every kit also serves keyless HTTP GETs (search, read, graph pivot), documented in its llms.txt. A browser-only version of the whole exam runs at demo.kit-project.com/investigate.
Scoped access, demonstrated
The papers kit also publishes the apprentice key, a deliberately narrowed
credential (allowed_areas: columns): the same kit through a smaller window.
Run the same leak query with the full key and with the apprentice key and
watch the private journals vanish from the answers. That mechanism, a company
kit sharing one knowledge area with a contractor's agent, is enforced in the
read path, not in copy. Current apprentice key, same rotation rule:
kbr_live_FoAauFWl7_IoDswh8rJrFvCw2qnblQTOF8DuSBkbj7A
What these servers are, honestly
Read-only museum copies of Kit substrates: hybrid semantic + keyword recall,
typed knowledge graphs (including supersedes edges that keep replaced truth
citable), source artifacts with real URLs, and honest empty results when
nothing is held. They demonstrate read-time behavior; a full Kit also writes,
consolidates while it sleeps, and hands off between sessions on your own
machine. There is a replayable benchmark built on these exact servers:
kit-memory-eval.
The build story: kit-project.com/blog, note No. 022 in particular. The product: kit-project.com, local-first, invite beta.
License
MIT (code and examples in this repo). The demo worlds themselves are licensed with the benchmark: see kit-memory-eval's DATA-LICENSE.