1. Conduid
  2. Developer Tools
  3. Rune
MCP server · Developer Tools

Rune

RUNE: Encrypted shared memory for AI agents. Memory that outlives the conversation.

67Good

Scored 7 days ago · breakdown

About Rune

Rune is an MCP server published by CryptoLabInc in the Developer Tools category: rUNE: Encrypted shared memory for AI agents. Memory that outlives the conversation.

The repository has 19 stars and 7 forks, with the last commit 2 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add rune -- npx -y @mcp-rune/mcp-rune
npx
npx -y @mcp-rune/mcp-rune

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Rune

Powered by Claude · Grounded in docs

I know everything about Rune. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 6 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v1.0.0rune CLI v1.0.0 · 20 Jul 2026What's Changed fix(bootstrap): resolve CLI via /releases/latest with a registration_string pin guard by @jh-lee-cryptolab in https://github.com/CryptoLabInc/rune/pull/192 Release: pin rune-mcp and runed to v1.0.0 by @jh-lee-cryptolab in…
v0.4.1rune CLI v0.4.1 · 17 Jun 2026What's Changed fix: correct outdated document and prompt by @esifea in https://github.com/CryptoLabInc/rune/pull/167 fix(bootstrap): classify deterministic failure as real error by @esifea in https://github.com/CryptoLabInc/rune/pull/168…
v0.4.0rune CLI v0.4.0 · 9 Jun 2026rune is FHE-encrypted shared memory for AI agents — it gives every agent on a team the collective experience of the whole organization, captured and recalled automatically over the embedding → AES encryption → enVector storage / FHE…
v0.3.1v0.3.1 release · 10 Apr 2026What's Changed docs: update README positioning and team setup guide by @sunchuljung in https://github.com/CryptoLabInc/rune/pull/70 ci: migrate workflows to self-hosted runner by @heeyeon01 in https://github.com/CryptoLabInc/rune/pull/71…
v0.3.0v0.3.0 release · 9 Apr 2026Breaking Change! This release is NOT compatible with v0.2.x. Existing encrypted indexes must be re-created. Embedding dimension changed from 768 to 1024: Default embedding model switched from bge-base-en-v1.5 (768d, English-only) to…

README

Get started in three commands

[!NOTE] RUNE currently supports Claude Code on Linux and macOS. Codex, Antigravity, and MCP-capable local agent runtimes powered by SLMs are coming soon. You also need a runev1_… registration string from your RUNE workspace administrator.

Run these commands inside a Claude Code session:

/plugin marketplace add https://github.com/CryptoLabInc/rune
/plugin install rune
/rune:configure

When prompted by /rune:configure, paste the registration string from your invitation email. RUNE installs its runtime, connects to your team's Console, and activates organizational memory.

Then use RUNE directly:

/rune:capture We cap payment retry backoff at five minutes to prevent queue starvation during webhook spikes.
/rune:recall Why is the payment retry delay capped at five minutes?

See the member quick start for the complete setup flow.

Agent support

RUNE's memory layer is built on MCP, so it is not intended to stay tied to a single agent. Claude Code is available now. Codex, Antigravity, and MCP-capable local agent runtimes powered by SLMs—including Qwen 3.6-based setups—are coming soon. The same capture, blind-search, and recall workflow will carry across each integration.

Commands

Command What it does
/rune:configure Connect or reconnect this device using a registration string.
/rune:capture [context] Save a decision, insight, or piece of team context.
/rune:recall [query] Find relevant memories and cite their record IDs.
/rune:status Inspect configuration, Console, keys, pipelines, and the local embedder.
/rune:deactivate Pause capture and recall without removing credentials.
/rune:activate Resume RUNE with the existing configuration.
/rune:update Update the installed rune-mcp and runed runtime binaries.

How it works

Claude Code is available today. Dashed integrations—Codex, Antigravity, and MCP-capable local agent runtimes, including Qwen 3.6-based setups—are planned.

  1. runed creates the embedding on your device.
  2. The plugin encrypts the vector with FHE and seals the memory payload before sending it through your team's Console.
  3. RuneSpace evaluates similarity over encrypted vectors and returns encrypted results.
  4. The Console, which holds the team's secret key, opens authorized results and returns the relevant memories to the agent.

RuneSpace stores neither plaintext documents nor plaintext embeddings. Team keys and access policy remain in the Console trust boundary.

Repository map

This repository is the public entry point for RUNE's agent integrations. The current release contains the Claude Code plugin manifest, slash commands, session hook, and the bootstrap CLI that installs and supervises the shared runtime. Additional MCP-capable agent adapters will live alongside it as support expands.

Path Responsibility
.claude-plugin/ Claude Code plugin and marketplace manifests.
commands/claude/ User-facing RUNE slash commands.
hooks/ Session integration and proactive capture hints.
cmd/rune/ Bootstrap, update, diagnostics, and runtime launcher CLI.
internal/ Verified downloads, installation checks, and process supervision.

Development

The bootstrap CLI is written in Go. Go 1.26.2 or newer is required for local development.

go build ./cmd/rune
go vet ./...
go test -race ./...

Pull requests should keep agent-specific integration thin and leave installation, updates, and supervision in the shared bootstrap layer.

License

RUNE is licensed under the Apache License 2.0.

README fetched from the repository 6 hours ago. The original is authoritative.

Questions

About Rune

How do I install Rune?

Run claude mcp add rune -- npx -y @mcp-rune/mcp-rune, then add the server to your MCP client's configuration.

Is Rune safe to use with an AI agent?

Its trust score is 67 out of 100 (good). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Rune still maintained?

Yes — the latest release is v1.0.0 (20 Jul 2026), and the last commit was 2 months ago. The repository has 19 stars and 3 open issues.