Back to Home
michielhdoteth icon

squish

Verified Safe

by michielhdoteth

Overview

Local-first persistent memory for AI agents, providing auto-capture of interactions, context injection, and advanced memory management features including deduplication.

Installation

Run Command
node dist/index.js

Environment Variables

  • DATABASE_URL
  • REDIS_URL
  • SQUISH_EMBEDDINGS_PROVIDER
  • SQUISH_OPENAI_API_KEY
  • OPENAI_API_KEY
  • SQUISH_OLLAMA_URL
  • SQUISH_WEB_PORT
  • SQUISH_PRIVACY_MODE
  • SQUISH_LIFECYCLE_ENABLED
  • SQUISH_LIFECYCLE_INTERVAL
  • SQUISH_SUMMARIZATION_ENABLED
  • SQUISH_INCREMENTAL_THRESHOLD
  • SQUISH_ROLLING_WINDOW_SIZE
  • SQUISH_AGENT_ISOLATION_ENABLED
  • SQUISH_DEFAULT_VISIBILITY
  • SQUISH_GOVERNANCE_ENABLED
  • SQUISH_CONSOLIDATION_ENABLED
  • SQUISH_CONSOLIDATION_THRESHOLD

Security Notes

The web UI (http://localhost:37777) exposes API endpoints (e.g., /api/memories, /api/observations) which currently serve mock data but, if fully implemented with real data, would require robust authentication and authorization to prevent unauthorized access to potentially sensitive project memories. Default PostgreSQL credentials in `docker-compose.yml` (`squish`/`squish_dev`) are insecure for production and must be overridden. The project effectively mitigates SQL injection risks by utilizing Drizzle ORM and parameterized queries for database interactions. Secret detection and private tag filtering are implemented to enhance privacy, and API keys are loaded via environment variables, not hardcoded. The `npx-installer.js` script uses `execSync` for installation, which is generally a risk, but it downloads from the official GitHub releases.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2026-01-19

Tags

claude-codepersistent-memorysemantic-searchmemory-managementauto-capture