Estratos

What is Estratos?

Estratos is a hosted Model Context Protocol (MCP) memory server. It gives every AI agent your team uses — Claude, Codex, Copilot, and any other MCP-capable client — one shared, company-wide memory, so they stop starting from zero on every conversation.

Your assistants already answer questions about your clients, your services, and your house style. Today they do it from scratch, in every tool, for every person, because nothing they learn accumulates. Estratos is where that knowledge lives: connect an agent once, and it retrieves exactly the context a given scope needs — governed by reviews, versions, and an audit trail.

The core idea

Estratos has three moving parts.

  1. A hierarchy models how your company is organized. It is an ordered set of layers — for an accounting firm, that's root, then clients, then services. Each folder in the tree is addressed by a dot-path like root.pennine-joinery.vat.
  2. Memories are Markdown notes attached to that hierarchy. A scoped memory attaches to one folder (the VAT profile for one client). A tagged memory attaches to a whole layer — optionally to one segment value — so a rule you write once applies everywhere it should.
  3. Retrieval is how agents read. An agent asks for a scope path and Estratos walks the tree from the root to that folder, assembling one Markdown bundle: everything scoped to the folder, plus the tagged rules that apply, in a fixed order.

Paths address scopes, never individual notes. You ask for a scope and get the whole picture — no single memory is ever fetched on its own.

What makes it safe to share

Shared memory is only useful if you can trust it. Governance is the product, not an add-on:

  • A review workflow. Owners and Admins write directly; Basic users propose. A Basic user's create, edit, or delete — whether typed in the app or written by their agent over MCP — becomes a proposal an approver signs off before it reaches shared memory.
  • Versions and rollback. Every save writes a new version with its author and change type. Compare any two versions as a diff, and roll back in one click. Deletes write a tombstone, never a hard delete.
  • A standard, OAuth-secured endpoint. Estratos exposes exactly six memory tools at one MCP endpoint, secured with OAuth 2.1 and PKCE. Tokens are scoped to one organization and one resource; identity comes only from the token, never a parameter.
  • Hard tenant isolation. Every organization's data is separated at the database layer with PostgreSQL row-level security — enforced even against raw SQL.
  • An audit trail and exports. Logins, token grants, every MCP tool call, and every memory change are recorded. Generate a ZIP of any scope you can access, with front matter on every file, whenever you want your data.

Who it's for

Estratos fits any company that repeats context to its AI tools, and professional-services firms especially well: accounting and advisory firms, agencies and studios, and product and engineering teams. Wherever knowledge lives in people's heads and gets re-explained to an assistant, Estratos gives that knowledge a home your agents can read.

Where to go next