One memory, every AI app, your rules
Agentu is the app for people and companies who keep one memory of their own, encrypted in Switzerland and opened only to answer them, with every AI integrated. It is the encrypted layer between you and the AI apps you use: apps remember and recall through it; you decide who sees what, watch who wrote what, keep it in Switzerland, and can leave with everything at any time.
This page describes Agentu. The company workspace where many AIs work the same memory at the same time is Agentu Professional, in build.
Four steps, no dead ends
The same numbered flow on the web app, the Mac app, the Chrome extension and the phone app. You are never asked to type a memory first: connect the AI you already use and bring across what it knows.
Create
Face ID or Touch ID on memory.agentu.com. No e-mail, no password.
Live
Your phone is the key
Agentu manages the keys by default: unlock your phone and your memories are there, no codes to type. Press "Hold my own keys" and you get a 24-word recovery phrase instead, shown once; you tick "I've saved it" and press Next: Connect your AI.
Live passkey and recovery phrase · In build "Hold my own keys" switch, "Next" step
Connect your AI
Agentu shows what is on this device and offers one Connect button per app: ChatGPT, Claude, Codex, Gemini, Cursor, VS Code. No AI subscription? Get one through Agentu.
Live by URL for ChatGPT, Claude, Gemini · In build one-click buttons, Codex, Cursor, VS Code sign-in
Bring your memories
One tap opens your AI with "Save everything you know about me to Agentu" already written. You press send; memories arrive encrypted on your device and sorted into categories. Export them any time.
In build
One click per app
The Connect AI apps screen on every surface detects what you have and offers one button each. Nobody needs to know what an "MCP server" is.
- Codex: a copyable
codex mcp add agentu --url https://memory.agentu.com/mcp; the Mac app can write it into~/.codex/config.tomlwith your consent, which covers the CLI, the desktop app and the IDE extension at once. - ChatGPT: Settings → Connectors → Create, with the values pre-filled; one-click from the ChatGPT app directory once listed.
- Claude.ai and Claude Desktop: Settings → Connectors → Add custom connector with the URL pre-filled. Claude Code:
claude mcp add --transport http agentu https://memory.agentu.com/mcp. - Gemini: Settings → Connected apps → Add custom app with the URL pre-filled.
- Cursor and VS Code: an install deep link each.
Connecting by URL and OAuth is live for ChatGPT, Claude, Claude Desktop and Gemini. The sign-in for apps that use a loopback callback (Codex, Claude Code, Cursor, VS Code) is being fixed first; the per-app buttons, app detection and deep links follow, and each is marked live only when it ships. Directory listings with OpenAI and Anthropic are being filed. Guides per app →
The Agentu Bridge for Mac
A menu-bar app that, when you hold your own keys, keeps your key on this computer, acts as the local memory server for Claude Desktop, Claude Code, Codex, Cursor and VS Code, detects which of them are installed, and configures each with one toggle and your consent. It shows live state, "Connected · 7 tools", for every app.
In build Signed and notarised, ships as a DMG with auto-update; a Chrome extension and an iOS app follow the same design system.
Remember
Any connected app can store a memory in a category, a fact, a preference, a decision, with optional tags. Entries are sealed before they are written; the service keeps only ciphertext plus a small unencrypted header (category, time, size, provenance).
Recall
An app asks for what is relevant to a question and gets back only the categories its key allows. Recall happens inside the request: entries are decrypted for the moment, filtered, and returned; nothing is indexed in the clear.
Forget, provably
Forget an entry and its content is gone while its place in the history stays verifiable. Delete a category or your whole memory and the encryption key is scheduled for destruction after a short grace period: everything sealed under it becomes unreadable everywhere, backups included.
Verify
Every category is an append-only chain of signed hashes. You, or your app, can verify that nothing was altered, reordered or silently removed, and the public signing keys are published so anyone can check.
Keys, not accounts
There is no username and no password. Memory is controlled by keys: an owner key that can do everything, and as many narrow keys as you like for apps, people and agents. For a business, categories follow the organisation, projects, client matters, roles, and keys follow the categories.
| Scope | What it allows | Typical use |
|---|---|---|
read:Work | Recall from one category only; the key cannot see other categories exist. | A coding assistant that should know your projects and nothing else. |
write:Personal | Add memories to one category. | A journalling app that files entries but never reads them back. |
read:* write:* | All categories. | Your main assistant. |
manage | Create and revoke keys, categories, export, delete. | You, from a trusted device. |
Revoke a key and every connection made with it stops immediately, including OAuth sessions in Claude, ChatGPT and other apps. That is how a leaver is offboarded: one revocation, everywhere.
Who holds the key
The encryption is the same in every case. What you choose is who holds the key.
Managed by Agentu
Memories are encrypted in Switzerland and opened by the platform only to answer your AI, never stored in plaintext, every open logged. Unlock your phone and your memories are there; no codes to type. Nobody at Agentu reads them. Not zero-access: a compromised live server during the window of a request is the limit.
Hold your own keys
Press "Hold my own keys" and you are on Sovereign custody: keys only on your devices, with a 24-word recovery phrase. Agentu's servers never hold a key that opens anything. Your AI reads through your phone, the Agentu Bridge or a time-limited Away grant; it is up to you. In build the one-press switch and the iCloud Drive and Google Drive recovery-kit backup.
Agentu Sealed
The upgrade to the managed default: the key in our vault only turns with your biometric (Face ID, fingerprint or device PIN), and a sealed enclave is the only reader. Each request is decrypted on demand, the AI never receives the key, and the grant relocks on idle or a hard limit and can be revoked at once. Not zero-access during a live grant. Biometric-Sealed Encryption →
Dedicated On request: a single-tenant Agentu operated by Agentu in the region you choose, with the same choice of who holds the key. Dedicated → · Key custody on the security page →
Every memory says who wrote it
Each entry records the app, the model and the connection that created it. When two assistants disagree about what you said, you can see which one remembered what, and when.
{
"category": "Work",
"createdAt": "2026-09-27T09:12:44.000Z",
"source": { "app": "Claude", "model": "claude", "via": "mcp" },
"content": "Prefers ADRs before any cryptography change."
}Leave any time, with proof
Export
One request returns your entire memory as a portable, encrypted bundle protected by a passphrase you choose. The bundle carries the public keys and chain hashes it needs, so it can be verified and decrypted offline with the agentu-verify tool. Agentu is not required for either.
Dedicated
A single-tenant Agentu operated by Agentu in the region you choose, Swiss hardware later, per deployment on request. The shared service is convenience, not lock-in: export works the same on both. Dedicated →
What is live and what is next
Every capability on this site is marked Live, In build or Planned. We say only what is true.
| Capability | Status |
|---|---|
| Encrypted, categorised memory with scoped keys, provenance, chains, export and crypto-shredding | Live |
| Remote MCP for ChatGPT, Claude, Claude Desktop, Gemini, Perplexity and other assistants (OAuth), local MCP server, REST API, TypeScript SDK | Live |
| Sign-in from Codex, Claude Code, Cursor and VS Code (loopback OAuth callback), with a regression test in CI | In build |
| Encrypted memory service stored in Switzerland (AWS Zurich) | Live |
| Free sign-up with Face ID or Touch ID on memory.agentu.com, no e-mail or password, with a recovery phrase | Live |
| Managed by Agentu (default): memories encrypted in Switzerland, opened by the platform only to answer your AI, never stored in plaintext, every open logged | Live |
| Hold your own keys (Sovereign custody): keys only on your devices, 24-word recovery phrase, AI access through the app, the Bridge or an Away grant | Live |
| The one-press "Hold my own keys" switch, and the recovery kit backed up to iCloud Drive or Google Drive in a file Agentu cannot open | In build |
| Agentu Sealed: Biometric-Sealed Encryption, the upgrade to the managed default, with the working key released into a sealed enclave only on your biometric unlock, relocking on idle or a hard limit | In build |
| Dedicated: a single-tenant Agentu operated by Agentu in the region you choose, Swiss hardware later | On request |
| Connect AI apps screen with one button per app, app detection, Cursor and VS Code deep links, Codex config written with consent | In build |
Bring your memories: prefilled prompt, import through remember_many, encrypted on the device, sorted into categories | In build |
| One design system, light and dark, across the web app, Mac app, Chrome extension and iOS app | In build |
| Listings in the ChatGPT app directory and the Claude Connectors Directory; Chrome Web Store; TestFlight | In build |
| Agentu Professional: many AIs on one company memory at the same time, one brief to all AIs (compete and collaborate), admin portal, one agentu.com login for every AI, projects with work log, people as ID codes, one-action removal, keys managed by Agentu or held by the company | In build |
| Google Workspace side panel (Gmail, Drive, Docs) and Microsoft 365 add-in (Outlook, Word, Excel, Teams) | In build |
| Regional homes in the United States and Singapore for customers whose rules require in-country storage | In build |
| Get an AI through Agentu: ChatGPT, Claude, Gemini or Agentu AI packages, billed by Agentu | Planned · waitlist |
| Enterprise: ask every model at once; Dedicated; SSO | Planned |
| Find & categorise documents across Drive, iCloud and other stores | Planned |
| Personal agent; business agent teams | Planned |
| Encrypted search across large memories | Planned |