Skip to content

Memory connectors

Memory connectors attach Shield360 to external agent memory providers. Use them to browse stored facts, search semantically, add or edit memories, copy between backends, and ask Otter questions grounded in connector data.

Add memory connectors from Configuration → Connectors (/connectors) under the Memory category, or directly from the Memory page (/memory) when no connector exists yet. Connectors are scoped to the current project and environment.

flowchart LR
subgraph proj [Project + environment]
MC[Memory connector]
end
MC --> API[Vendor memory API]
MC --> MemPage[Memory page]
MC --> Otter[Otter chat tools]
MemPage --> Browse[List / graph / detail]
Otter --> Tools[list / search / add / update / delete]
  • Atomic connectors — one Mem0 project endpoint, one Zep tenant, one Claude memory store configuration per connector instance.
  • Capability-driven UI — each vendor advertises supported operations (list, search, add, update, delete, feedback). Shield360 hides actions the vendor does not support.
  • Filters — user, session/run, and agent filters are declared per vendor. Some connectors require a session or user before listing memories.
  • Port links — copying a memory to another connector stores provenance metadata so you can trace copies back to the source.
ConnectorDefault endpointWhat it’s for
Claudehttps://api.anthropic.comBrowse and edit memories in Anthropic Claude memory stores (Managed Agents memory beta)
Mem0https://api.mem0.aiStore and search long-term agent memories scoped by user, run, or agent
Zephttps://api.getzep.comSession memory and knowledge-graph facts for agents

Self-hosted Mem0 or Zep deployments work when you point the connector at a compatible API URL and supply the same authentication style as the hosted service.

ConnectorListSearchGetAddUpdateDeleteFeedbackRequired filters
ClaudeYesYes*YesYesYesYesNoMemory store (session)
Mem0YesYesYesYesYesYesYesOptional user / run / agent
ZepYesYesYesYesNoYes†NoUser; session required for writes

* Claude has no dedicated search API — Shield360 filters listed memories locally for search queries.

† Zep delete targets graph edges/nodes, not an entire session.

Select project and environment

Use the header selectors for the target project and environment.

Open Connectors

Go to Configuration → Connectors, open the Memory section in the catalog, and choose Add connector.

Pick a vendor

Select Claude, Mem0, or Zep.

Configure endpoint and credentials

Set the API URL (defaults work for hosted services), optional SSRF toggles for private networks, and the API key. Mem0 also accepts optional organization and project IDs.

Test and save

Run a health check, then save. Open Memory (/memory) and select the connector from the dropdown.

Once a connector is configured, the Memory page provides:

FeatureDescription
Connector selectorSwitch between memory connectors in the current environment
FiltersUser, session/run, and agent filters when the vendor supports them
Memory listPaginated list with search
Detail sheetFull memory content, metadata, history, and feedback (when supported)
Graph viewRelationship visualization for graph-capable vendors (for example Zep)
Write actionsAdd, update, or delete memories when the connector advertises those capabilities
CopyCopy selected memories to another write-capable connector in the same environment
Ask OtterNatural-language search and Q&A grounded in connector list/search APIs

When Otter runs on the Memory page or in chat with memory context, it can call connector-backed tools:

ToolWhen available
list_memoriesConnector supports list
search_memoriesConnector supports search
add_memoryConnector supports add
update_memoryConnector supports update
delete_memoryConnector supports delete

Otter passes required filter arguments (user, session, agent) when the vendor mandates them. Enterprise builds apply the same RBAC and audit hooks as the /api/memory routes.

ConnectorAuth styleNotes
ClaudeAPI key (x-api-key)Sends the agent-memory-2026-07-22 beta header for memory store APIs
Mem0Token (Authorization: Token <apiKey>)Works with Mem0 Platform or self-hosted compatible endpoints
ZepAPI key (Authorization: Api-Key <apiKey>)Works with Zep Cloud or self-hosted compatible endpoints

API keys are stored encrypted on the connector (enc:v1:…) and decrypted only server-side for outbound requests.

Use Copy on the Memory page to duplicate memories into another write-capable connector in the same project and environment. Shield360:

  1. Reads the source memory from the origin connector
  2. Writes to the destination connector when add is supported
  3. Stores metadata.shield360.port on the destination memory and links the destination connector back to the source for traceability

Copy requires connectors:update (or equivalent memory mutation permission in enterprise).

  • Endpoints validated (http/https only); credentials in URLs rejected; private/metadata SSRF targets blocked where applicable.
  • Secrets encrypted on the connector instance, redacted from errors, never logged.
  • Outbound calls use the shared safe-fetch layer with the same SSRF controls as data-source connectors.
  • Content limits: memory body up to 20,000 characters; metadata JSON up to 4,000 characters.