Any agent that speaks HTTP can read and write your memory. One API key, user-scoped, rate-limited, auditable.
Semantic search over your full memory graph. Returns the answer, confidence, and the memories it cited.
curl -X POST https://api.mybrain.ai/v1/brain/ask \
-H "Authorization: Bearer mbk_live_..." \
-H "Content-Type: application/json" \
-d '{"question": "What are my dietary preferences?"}'
# Response
{
"answer": "You prefer vegetarian. Allergic to peanuts. Love Thai (47 mentions).",
"confidence": "high",
"sources": ["preferences/food.md", "conversations/2024-09-11.md"]
}Append a fact to your vault. Deduped against your graph automatically. Scored, tagged, and indexed.
curl -X POST https://api.mybrain.ai/v1/memory/write \
-H "Authorization: Bearer mbk_live_..." \
-H "Content-Type: application/json" \
-d '{
"text": "Atlas launch retro moved to Thursday 2pm.",
"tags": ["work", "atlas launch"],
"source": "claude-code"
}'
# Response
{
"id": "mem_8f3c7a91e2b04d",
"deduped": false,
"cluster": "work · atlas launch"
}Full-text + vector hybrid search. Filter by tag, source, or recency. Paginated.
curl "https://api.mybrain.ai/v1/memory/search?q=running&tag=health" \
-H "Authorization: Bearer mbk_live_..."
# Response
{
"memories": [
{"id": "m6", "text": "Right shoulder soreness after long runs.", "when": "3h ago"},
{"id": "m11", "text": "Saucony Endorphin Speed 4.", "when": "2d ago"}
],
"total": 2,
"next_cursor": null
}Forward Slack, Linear, Stripe — any service that speaks HTTP. mybrain extracts what matters.
curl -X POST https://api.mybrain.ai/v1/webhook/your-key \
-H "Content-Type: application/json" \
-d '{
"event": "issue.closed",
"payload": { "title": "Ship Atlas redesign", "actor": "you" }
}'
# Response
{
"ingested": true,
"memories_written": 1
}Generate as many keys as you need from your dashboard. Revoke any one at any time. Every call is logged in your activity feed.
Every key writes to one brain. No cross-account access. Server-side enforced at every layer.
1,000 requests/min on Plus, 100/min on BYO. Burst-friendly. Soft fail when exceeded.
Every read and write shows up in /activity with the source agent, timestamp, and payload size.
Kill any key from /settings/developer. Active sessions terminate within 5 seconds.
All traffic forced over TLS 1.3. Cleartext requests are rejected at the edge.
Calls aren't logged for training. Your data and queries stay yours, period.