Add the Atlaso Memory plugin

[imashishkh21]

Add the Atlaso Memory plugin

Adds Atlaso (atlaso/) — automatic long-term memory for Cursor. It recalls what
you've decided and remembers what matters across sessions, projects, and tools, so the
agent starts each session with the relevant context instead of a blank slate.

Homepage: atlaso.ai · Source: atlaso-labs/cursor

What it adds

Component
Hooks	sessionStart recalls relevant notes into a rules file; stop/sessionEnd capture the exchange. The automatic loop, zero model involvement.
MCP server (atlaso)	5 tools — recall, remember, forget, recent, status — for deliberate moves.
Rule (alwaysApply, with frontmatter)	Orients the agent: treat recall as known context.
Skill	Curation judgment — what's worth keeping, personal vs project.

Self-contained — no external binary

The MCP server is lib/mcp.ts, which ships inside the plugin and runs on the bun
Cursor already provides (bun run ${CURSOR_PLUGIN_ROOT}/lib/mcp.ts). There is no
unpublished CLI or npm package to install — the whole plugin is self-contained and
works on a fresh machine. Rule has valid description + alwaysApply frontmatter; the
skill has name + description; rule and skill are distinct (orientation vs judgment).

Privacy (a memory plugin should be explicit here)

• Secrets are scrubbed on the user's machine before anything is sent — API keys,
  tokens, and credentialed URLs are redacted client-side (regex + entropy), and again
  server-side.
• Per-tool credentials. The plugin holds its own token, so removing it revokes only
  Cursor — nothing else on the machine.
• Fails open. If memory is unreachable, Cursor works exactly as usual — capture and
  recall never block or break a turn.
• Users own their data and can view/delete any memory at
  app.atlaso.ai/dashboard.

Validation

• Passes node scripts/validate-plugins.mjs (marketplace + plugin manifests).
• The plugin is covered by 100+ unit tests plus an offline end-to-end harness in the
  source repo.

Maintained by Atlaso Labs (we ship the same memory for Claude Code, Codex, and
Antigravity). Happy to make any changes the team would like. Contact: [email protected]

---

Note

Medium Risk
New third-party plugin that sends scrubbed chat content and bearer tokens to an external service on every session/turn; large new surface (hooks + MCP + auth) though designed fail-open and with client-side redaction.

Overview
Adds the Atlaso Memory plugin (atlaso/) to the official marketplace and ships a self-contained bun connector (no extra install) that syncs with Atlaso’s cloud brain.

Automatic loop (hooks): sessionStart writes recalled notes to .cursor/rules/atlaso-recall.mdc; beforeSubmitPrompt / afterAgentResponse stash the turn; stop / sessionEnd gate, scrub secrets, scope personal vs project, enqueue durably, then deposit. First run can spawn a detached PKCE device browser connect. Hooks always exit 0 and skip when unlinked.

Deliberate control: Inline stdio MCP (recall, remember, forget, recent, status) reuses the same per-tool credential and entitlement checks as hooks.

Supporting behavior: Per-tool tokens minted under lock (with a Windows O_EXCL fallback), write-ahead outbox + drain retries, cached cloud entitlement (free = one active tool), tri-state project keys and cross-project recall filtering, plus an alwaysApply rule and memory curation skill.

^{Reviewed by Cursor Bugbot for commit 96fb8ff. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{Bugbot Autofix is ON, but it could not run because the branch was deleted or merged before autofix could start.}

^{Reviewed by Cursor Bugbot for commit d7e9a26. Configure here.}