Install • How it works • Commands • Languages • Specs
Leteo — persistent memory for AI coding agents
Your coding agent forgets everything when the session ends, and most of it when the context is compacted. Leteo is the memory it keeps: decisions, bug fixes, conventions and the discoveries that were expensive to make, stored in a local SQLite database and handed back when they are relevant.
One binary, no server, no API key. Nothing leaves your machine unless you turn on cloud replication for a project you name.
Works with: Claude Code · Codex · Cursor · Gemini CLI · OpenCode · Windsurf · VS Code Copilot · Kilo Code · Qwen · Kiro · Antigravity · Pi
What it feels like
You never prompt it to remember. That is the whole idea. Your agent opens each session already holding what the project knows, and saves as it goes while you work — a bug fixed, a convention agreed, something non-obvious learned. Those notes are written for its future self rather than for you, so they stay out of the conversation.
The rest is a SQLite file you own. leteo tui opens it, leteo export takes it
with you, and leteo delete means it.

Install
# Linux and macOS
curl -fsSL https://raw.githubusercontent.com/asanabrial/leteo/main/scripts/install.sh | sh
# Windows
irm https://raw.githubusercontent.com/asanabrial/leteo/main/scripts/install.ps1 | iex
Or through a package manager, if you already keep your tools in one:
brew tap asanabrial/leteo && brew install leteo
scoop bucket add leteo https://github.com/asanabrial/scoop-leteo
scoop install leteo
Either way, open Leteo and set your agent up from the Setup screen:
leteo tui
That is all of it. Nothing else to install first — not Rust, not SQLite, not a
runtime: the archives are prebuilt binaries with SQLite compiled in, and each
script checks its download against the published SHA256SUMS before installing
anything. From the scripts the binary lands in ~/.local/bin, or
%LOCALAPPDATA%\leteo\bin on Windows — Homebrew and Scoop put it where they
put everything else. LETEO_INSTALL_DIR moves that, LETEO_VERSION takes a
tag other than the latest release, and LETEO_BASE_URL downloads from
somewhere other than GitHub releases. Those three belong to the scripts rather
than to the binary, which is why they are not in the
Environment table.
Releases carry five builds — x86-64 Linux, Windows and macOS, and arm64 Linux and macOS. The two Linux ones ask for nothing newer than glibc 2.34, so they run on Debian 12, Ubuntu 22.04, RHEL 9 and anything later. That floor is pinned in the release workflow rather than inherited from whichever image GitHub calls latest: v0.1.0 inherited it, and wanted a glibc newer than Debian stable's. On anything else, build from source, which is the one route that needs Rust:
cargo install leteo
That builds the released version from crates.io.
To build whatever is on main instead, including work that has not been
released yet, ask for the repository:
cargo install --git https://github.com/asanabrial/leteo.
Without installing anything
Most MCP documentation assumes npx, so there is a wrapper on npm that fetches
the release binary for your platform, checks it against the same published
SHA256SUMS, and hands it every argument:
{
"mcpServers": {
"leteo": {
"command": "npx",
"args": ["-y", "@asanabrial/leteo", "mcp"]
}
}
}
bunx @asanabrial/leteo mcp works the same way — it is the same package from
the same registry, and the wrapper depends on nothing but what both runtimes
already have.
The npm version is the release tag, so pinning one in npm pins the binary it
fetches — a guard holds the two numbers together, because published one behind
it would quietly serve the previous release to everybody arriving this way. It
is a way in rather than the way to run it: a binary on your PATH starts
without a download and is what leteo setup writes into your agent.
As a plugin
Claude Code takes Leteo as a plugin, which registers the same MCP entry and the
same five lifecycle hooks leteo setup writes, through Claude Code's own plugin
machinery:
/plugin marketplace add asanabrial/leteo
/plugin install leteo@leteo
The plugin carries configuration, not the binary. Install leteo by one of the
routes above first: the MCP entry and every hook the plugin registers run
leteo from PATH, so without it they are five commands that are not there.
What the plugin replaces is the setup step, and removing it takes those entries
away again.
Pick one of the two, not both. Registered twice, every lifecycle event runs
twice — which stored each prompt twice, 23 identical pairs on the machine where
it was found, before anybody noticed anything was wrong. leteo setup --hooks
now looks for an installed bundle and refuses rather than adding a second
registration, naming the file it found.
Codex has the same bundle under plugin/codex, and there it is
the only route to the hooks — leteo setup codex registers the MCP server and
no hooks at all, which leaves Codex holding the tools with nothing telling it
when to reach for them.
Uninstall
leteo uninstall
leteo uninstall --yes
The first reports what would go and changes nothing. The second carries it out: Leteo leaves every agent it configured, and then the machine. On Windows it also registers itself in Installed apps, so it can be removed from there instead.
To leave one agent and stay in the rest:
leteo setup claude-code --uninstall
That takes out the MCP entry, the lifecycle hooks and the protocol block, and nothing else — other servers, other tools' hooks and your own notes stay where they are.
MCP
A 22-tool MCP server over standard input/output, run directly or written into a
client by leteo setup:
leteo mcp
Nineteen of the tools are the everyday ones an agent reaches for while it works;
three change or count the whole store and sit behind a profile. --tools picks
a profile or a single tool, and --project fixes the project for the process.
Alongside it there is a JSON command line, an interactive terminal UI, and setup support for twelve MCP clients — the list at the top of this page.
Its name in the MCP Registry is
mcp-name: io.github.asanabrial/leteo, which is what server.json
publishes. The line is written out rather than hidden in a comment because that
is what the registry reads to believe this repository owns the crate, and
crates.io strips HTML comments when it renders this file.
What you type
Rarely anything: the saving and the recalling happen without you. This is the
store from the outside, for the times you want to look yourself. Every command
prints JSON, and the default database is ~/.leteo/leteo.db.
Reading it. search is the one you will actually use, and --all-projects
widens it past the project you are standing in. recent is the last few in time
order; context is the block an agent is handed when a session opens, so it
shows what yours are starting with; timeline reads what was saved either side
of one memory; stats counts what is there. tui is all of it on one screen.
leteo search "connection pool" --project leteo
leteo search "connection pool" --all-projects
leteo recent --project leteo --limit 20
leteo context leteo --scope project
leteo timeline 42 --before 5 --after 5
leteo stats
leteo tui
Writing by hand. Seldom needed, since the agent saves as it works — but a memory you want in your own words, and the session boundaries an agent would otherwise draw for you:
leteo save "SQLite architecture" "One writer, many readers" --project leteo --type architecture
leteo session-start session-1 --project leteo
leteo session-end session-1
Setting an agent up. On its own it walks through it; naming an agent does
that one. --hooks adds the lifecycle hooks that make memory automatic, and
--dry-run reports every file it would touch without writing one:
leteo setup
leteo setup claude-code --hooks
leteo setup opencode --dry-run
Keeping it well. doctor runs every check and says which one failed and
why; --repair carries out the two repairs that are safe to make on their own.
export and import move a store between machines, and obsidian-export
writes it into a vault as Markdown:
leteo doctor
leteo doctor --repair
leteo export --project leteo --output leteo-export.json
leteo import leteo-export.json
leteo obsidian-export --vault C:\Vaults\Notes --project leteo
Projects. A project is worked out from the directory, so the same work can
end up filed under two names. consolidate folds a group of them into one name,
prune drops the ones holding no memories at all:
leteo projects list
leteo projects consolidate --project leteo --apply
leteo projects prune --apply
Conflicts. When a new memory looks like it contradicts an older one the two
are paired and the agent settles the pair. These read the same pairs from
outside: list and show for what is there, scan to look for pairs nobody
has recorded yet, stats to count them by verdict:
leteo conflicts list --project leteo --status pending
leteo conflicts show 7
leteo conflicts scan --project leteo --apply
leteo conflicts stats --project leteo
Deleting. Without --hard a memory is marked deleted and stops coming back
in answers; with it, the row is gone and its relations are cut. A project takes
the same flag. A session takes none, and while it still holds memories deleting
it is refused outright and says how many — a session goes when it is empty, not
by taking its memories with it:
leteo delete observation 42 --hard
leteo delete session session-1
leteo delete project leteo --hard
projects consolidate, projects prune and conflicts scan change nothing
until --apply: without it each one reports exactly what it would do.
Languages
Three settings, because they answer three different questions.
interface is Leteo's own screens: the panels, the menus, the help. Twelve
languages — English, español, português, français, Deutsch, italiano, català,
galego, euskara, Nederlands, polski, svenska — deliberately the same twelve
offered for memories, from the same table. Left unset it follows the machine's
locale, so a Spanish computer gets a Spanish dashboard without being asked.
voice_language is what Sardi speaks, and it is separate because those
lines are written into your agent's conversation rather than onto Leteo's
screens. Working in English on a Spanish machine is an ordinary thing to do.
Left unset it follows interface. It is the same twelve languages.
language is what memories are written in. It is handed to a model rather
than parsed, so it is free text and not limited to the twelve above: español,
Spanish, português do Brasil and 日本語 all work. Left unset, each memory
is written in the language of the conversation that produced it.
Settings
Those three and two more are kept in settings.json, in the data directory —
~/.leteo/settings.json unless you moved it. The Setup screen writes the file,
and it is also meant to be opened by hand: a value it cannot read costs that one
setting rather than the whole file. Nothing says so at the time, though, because
a hook must not fail while you are mid-edit — leteo doctor is what names a
setting being read past.
| Key | Values | Unset means |
|---|---|---|
interface | one of the twelve above | follow the machine's locale |
voice_language | one of the twelve above | follow interface |
language | free text | the language of each conversation |
voice | all, reminders, quiet | all |
context_size | slim, full, deep | full |
The two languages are written as the language's own name — español, not es —
and read back forgivingly, because this is a file people type into: the English
name, the ISO code and the spelling without the accent all work.
voice is how much of its own work Sardi says out loud — everything, the save
reminder alone, or nothing. context_size is how many memories a session opens
with: twenty, fifty or eighty, for a small context window or for a store that
matters more than the budget.
Two of the five are flags as well, because changing them should not mean reconfiguring an agent. Either one on its own is a whole command:
leteo setup --language "español"
leteo setup --context slim
Cloud
Optional, off by default, and per project. Your machine is the client; the cloud never connects back.
Turning it on takes two answers: where the server is, and which projects go
to it. config set writes the first into the data directory — into a file with
restricted permissions, because it holds a token — and enroll names a project.
Nothing replicates until both are done, and the commands below say so rather
than starting quietly:
leteo cloud config set --server https://memory.example.com --token YOUR-TOKEN
leteo cloud enroll --project leteo
leteo cloud config show
config show reads the configuration back with the token replaced by a presence
flag, so it is safe to paste.
Once it is on, health asks the server whether it is there and answering.
status contacts nothing at all: it reports this machine's own view — what is
enrolled, how many changes are waiting and since when, and whether the last
attempt failed and with what. sync runs one cycle now, and leteo serve keeps
running them in the background until interrupted:
leteo cloud health
leteo cloud status
leteo cloud sync
leteo serve
Not to be confused with leteo cloud serve, which is the other end — the server
itself, which you only run if you are hosting one. That side, with its Compose
stack, managed tokens and project grants, is in
openspec/specs/replication.md.
Coming From Engram
Leteo is an independent Rust product derived from the workflow and MIT-licensed implementation of Gentleman Programming's Engram. It is not affiliated with or endorsed by that project, and promises no drop-in CLI compatibility.
It reads an Engram database directly, so moving across is a copy. The first reports what it would adopt and writes nothing; the second carries it out, and refuses a second time rather than importing everything twice:
leteo import --from-engram --dry-run
leteo import --from-engram
It defaults to ~/.engram/engram.db; pass --source for another path. The copy
folds in the write-ahead log, so a running Engram's most recent memories come
across and its own file is never written to.
Build
Leteo requires Rust 1.97 or newer.
cargo fmt --all
cargo test
cargo clippy --all-targets -- -D warnings
cargo build --release
CI runs the tests. The formatting and the lints are on you before you commit,
which is why they are listed here and in AGENTS.md rather than
only in a workflow.
The cloud tests need a real PostgreSQL and are skipped without one. Point
TEST_DATABASE_URL at a throwaway database and run cargo test -- --ignored;
they create and drop their own schema, and are not written to share one.
Contributors — human or agent — should read AGENTS.md first.
Documentation
This file is the user-facing guide. What the system guarantees, and why, is in
openspec/ — one document per capability, cross-linked:
| Document | Covers |
|---|---|
project.md | what Leteo is, the crate layout, the system-wide invariants |
specs/memory-model.md | what a memory is, its types, review windows, normalisation |
specs/search.md | matching, ranking, the three stages, the narrowings |
specs/store-and-schema.md | the database, migrations, doctor and its repairs |
specs/mcp-tools.md | the MCP surface and the shape of its replies |
specs/hooks.md | the five lifecycle events and their time budgets |
specs/cli.md | the command line and what its answers explain |
specs/replication.md | the optional PostgreSQL peer |
Longer write-ups of individual measurements live in docs/. The first
is there was nothing worth tuning: the third
search stage answers questions belonging to another project 90.2% of the time,
which is more often than it answers its own, and four rules swept across their
whole range say that is not a threshold anybody can fix.
Environment
None of these has to be set. This is an inventory of every variable the
binary reads — a test fails the build when the binary honours one this table
leaves out — and not a list of things to configure. leteo setup writes what an
installation needs into each agent's own configuration file, and the choices you
make in the interface are kept in settings.json. Neither of them
sets a variable in your environment.
All but the last are a command-line flag as well, and the flag wins: the variable is read only when the command line does not answer the same question.
| Variable | Flag | Purpose |
|---|---|---|
LETEO_DATA_DIR | --data-dir | Local data directory; defaults to ~/.leteo |
LETEO_DATABASE | --database | Explicit local SQLite path |
LETEO_TOOLS | mcp --tools | agent, admin, all, or single tool names. Every tool when nothing names any |
LETEO_PROJECT | mcp --project | Project the MCP server trusts for the whole process; without it, the working directory decides |
LETEO_AGENT_CLI | conflicts scan --semantic | Agent CLI that judges conflict candidates: claude or opencode |
LETEO_SYSTEM_LANGUAGE | — | Language this machine works in, when LANG does not say. Read once, to offer it in leteo setup |
Two are worth a sentence more, because they are where the flag winning bites:
LETEO_TOOLSis already answered for every agent Leteo sets up: the MCP entry it writes runsleteo mcp --tools=agent. Exporting the variable afterwards changes nothing for that agent — edit the profile in its configuration file, or run the setup again.LETEO_DATA_DIRis the one with a real reason to be exported. The MCP server is started by the agent rather than by you, so a database somewhere other than~/.leteohas to reach it either through that agent's environment or as a--data-dirin the command its configuration runs.
Cloud, on your machine
leteo cloud config set persists the server and the token in the data directory
and is how this is configured. These two are read only where that file leaves
the field empty, so a setup that predates it keeps working unchanged.
| Variable | Purpose |
|---|---|
LETEO_CLOUD_SERVER | Cloud base URL for cloud health, cloud sync and the client config |
LETEO_CLOUD_TOKEN | Sync bearer token, at least 32 bytes |
leteo cloud serve reads LETEO_CLOUD_TOKEN too, as its own legacy static
token — on a machine that is both client and server, one name means two things.
Cloud, on the server
These belong to whoever runs leteo cloud serve, and they are set where that
service is defined — see
docker/docker-compose.yml. There is no wizard for
them on purpose: they are deployment secrets rather than preferences, and none
of this applies to a normal installation.
| Variable | Purpose |
|---|---|
LETEO_DATABASE_URL | PostgreSQL URL for cloud serve |
LETEO_DASHBOARD_SECRET | Dashboard signing secret, at least 32 bytes |
LETEO_CLOUD_TOKEN_PEPPER | Managed-token HMAC pepper, at least 32 bytes |
LETEO_CLOUD_ADMIN | Optional legacy admin bearer token, at least 32 bytes |
LETEO_CLOUD_ALLOWED_PROJECTS | Required allowlist for legacy cloud tokens |
LETEO_CLOUD_HOST | Cloud bind host; defaults to 127.0.0.1 |
LETEO_CLOUD_PORT | Cloud port; defaults to 8080 |
LETEO_CLOUD_MAX_POOL | PostgreSQL connection-pool limit |
LETEO_CLOUD_MAX_PUSH_BYTES | Maximum cloud push body size |
License And Attribution
Leteo is distributed under the MIT License. See LICENSE and
NOTICE for upstream attribution and the exact reference revision.
Tagged binary archives also include a generated THIRD_PARTY_LICENSES.html
covering their Rust dependencies.