cogito-memSafety
What you install
Cogi runs on your computer and never sends your conversations anywhere. Here is everything it adds, downloads and stores, so you can check for yourself.
Your computer only
The service answers only on 127.0.0.1, and it refuses requests from web pages.
No cloud, no tracking
No account, no API key, no analytics. After setup, Cogi makes no network calls.
Open source
Every line is on GitHub, under the MIT license.
What the plugin adds to Claude Code
Small files, each linked to its source:
| File | What it tells Claude Code |
|---|---|
plugin.json | Start an MCP server called cogi with the two tools, and ask for your memory's name. |
hooks.json | After each answer and at the end of a session, save the new messages. At the start of a session and with each prompt, add relevant memories. |
pyproject.toml, uv.lock | Every command above runs uv run --frozen … cogito-mem: Cogi's own Python code from the plugin folder, with the exact package versions in the lockfile. |
What gets downloaded, once
| What | From |
|---|---|
| Cogi itself (Python) and its one dependency, numpy | this repository and PyPI, by uv |
llama.cpp's llama-server, which runs the model (skipped if you already have it) | llama.cpp's official releases |
| The model, EmbeddingGemma 2 (310 MB, the big one) | Hugging Face, ggml-org |
Everything comes over HTTPS from its official source. After that, nothing is downloaded again.
What is stored, and where
In ~/.cogito-mem/ | What |
|---|---|
memory/yourname-hollow/ | your messages, and a short note of what each turn did, in one SQLite file |
cache/ | the numbers that make messages findable by meaning |
models/, bin/ | the model and llama.cpp |
run/ | logs, and the service's address while it runs |
config.json | your memory's name |
Before anything is stored, API keys, tokens, private keys and passwords in your chats are replaced with
[redacted]. Of Claude's work, only the command lines and file names are kept: tool output and
file contents are not stored at all.
Put anything you want kept out inside <private>…</private>. To pause capture, set
COGITO_MEM_CAPTURE=off; to keep messages only, COGITO_MEM_CAPTURE_ACTIONS=off.
Check it yourself
See that Cogi listens only on your own computer:
lsof -nP -iTCP:7327 -sTCP:LISTEN127.0.0.1:7327 (LISTEN), never *:7327
Or switch off Wi-Fi: Cogi keeps saving and finding as before.
Remove everything
claude plugin uninstall cogito-mem@cogito-memrm -rf ~/.cogito-memThe first removes the plugin; the second erases your memories, the model and llama.cpp.