TMCRA MEMORY API / v0.2.0

Persistent memory for production AI agents.

Turn ordered conversation events into tenant-isolated, temporal, prompt-ready evidence. TMCRA owns memory; your application keeps control of the agent runtime and final answer model.

Production base URLhttps://api.tmcra.comLive schema

Protocol: HTTPS / JSON
Authentication: Bearer token
Write model: Asynchronous jobs
Recall output: Evidence, not answers

Quickstart

Write once, then recall with read-your-writes.

1
Keep credentials on your server
Use the root key only in trusted infrastructure. Issue scoped tokens for integrations.
2
Choose a stable scope
Map a tenant user, persona, or workspace to one durable opaque scope_name.
3
Ingest idempotently
Send ordered messages with stable message IDs and an Idempotency-Key.
4
Recall before the model call
Pass prompt_evidence.content to the answer model together with recent conversation context.

curl -X POST "$TMCRA_BASE_URL/v1/scopes/user_123/ingest" \
  -H "Authorization: Bearer $TMCRA_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: ingest-session-42-v1" \
  -d '{
    "session_id": "session_42",
    "consistency": "read_your_writes",
    "slow_policy": "auto",
    "messages": [{
      "message_id": "msg_001",
      "role": "user",
      "content": "I prefer concise answers.",
      "timestamp": "2026-07-16T08:00:00Z"
    }]
  }'

Identity and isolation

Tenant, scope, and session are different boundaries.

tenant

The billing, credential, and administrative boundary identified by a root API key.

scope_name

The durable memory isolation boundary for one user, persona, or workspace.

session_id

One ordered conversation inside a scope. It is not inferred from message text.

Consistency

Successful messages commit once; later stages are recoverable.

Mode	Use when	Behavior
`eventual`	The next turn does not depend on this write.	Returns an async job immediately.
`read_your_writes`	The next recall must include committed data.	Wait for the job, then pass wait_for_job_id to recall.

A successful committed message is not replayed because graph evolution, indexing, webhook delivery, or a caller-owned answer operation later fails.

Webhooks

Signed lifecycle notifications with content-safe payloads.

Webhook delivery is at least once. Verify the HMAC-SHA256 signature, deduplicate by event ID, and return a successful response quickly. Payloads contain sanitized job and scope metadata, never prompts, messages, evidence, or credentials.

job.succeededjob.failedjob.cancelledingest.completedconsolidation.completedindex.completedexport.readyscope.deleted

Errors and retries

Retry by operation semantics, not by status alone.

Status	Caller action
`400 / 422`	Fix validation or request semantics before retrying.
`401 / 403`	Replace or re-scope the credential; do not retry unchanged.
`404`	The resource does not exist or is outside this credential boundary.
`409`	Inspect lifecycle, idempotency, or consistency conflict details.
`429`	Honor Retry-After and reuse the same idempotency key.
`5xx`	Retry only GETs and idempotent writes with bounded backoff.

SDKs and adapters

Use the stable contract directly; evaluate packages by release status.

Python SDKPREVIEW · tmcra-client

Typed sync and async clients available for pilot evaluation.

TypeScript SDKPREVIEW · @tmcra/typescript

A testable fetch client whose package surface may still change.

MCP ServerPREVIEW · stdio

A local compatibility bridge for approved test deployments.

LangGraphPILOT SOURCE · TMCRALangGraphMemory

Validated source adapter; no generally published package is promised.

OpenAI Agents SDKPILOT SOURCE · TMCRAAgentsMemory

Validated source adapter available through approved pilots.

Vercel AI SDKPILOT SOURCE · LanguageModelV3Middleware

Validated source middleware available through approved pilots.

Microsoft Agent FrameworkPILOT SOURCE · TmcraAIContextProvider

Validated source provider available through approved pilots.

Open platform integration guide

API reference

32 documented API operations.

Credentials

Issue, inspect, and revoke least-privilege access tokens.

GET/v1/sessionGet authenticated session

Returns the authenticated tenant, credential identity, permissions, and allowed memory scopes for the current Token.

Persistent memory for production AI agents.

Write once, then recall with read-your-writes.

Keep credentials on your server

Choose a stable scope

Ingest idempotently

Recall before the model call

Tenant, scope, and session are different boundaries.

Successful messages commit once; later stages are recoverable.

Signed lifecycle notifications with content-safe payloads.

Retry by operation semantics, not by status alone.

Use the stable contract directly; evaluate packages by release status.

32 documented API operations.

Credentials

Memory

Jobs

Memory graph

Governance

Webhooks

Usage