Quipu MCP server

quipu

🪢 A memory for your agents that refuses facts that break your rules

Quipu is a knowledge graph for AI coding agents and the people who run them. It stores what your agents learn as facts, checks every write against rules you declare (SHACL shapes), and refuses the facts that break them, so bad knowledge never gets in. It keeps every version of every fact, so you can ask what was true last Tuesday, and it answers standard SPARQL 1.1. It comes as a command-line tool, a REST server, and a Rust library, and agents reach it through bobbin's MCP server.

A quipu is the Andean knotted-cord record: cords are entities, knots are facts.

Why you would want it

fails with the rule it broke, so an agent can correct it on the spot.

• Bad facts are refused, not cleaned up later. A write that breaks a shape

it was true, so you can query the graph as it was at any moment.

• Nothing is overwritten. Every fact carries when it was recorded and when

1.1 Query, Update, Protocol and Results tests, scored alongside other stores in the conformance report.

• Standard, and measured. It passes all Working Group–approved W3C SPARQL

The long form (sharing between stores, the feature list, the architecture and a comparison): Why Quipu.

Install

Linux x86_64: download the checksummed release.

V=0.8.1
curl -fsSLO "https://github.com/scbrown/quipu/releases/download/quipu-ai-v$V/quipu-quipu-ai-v$V-x86_64-unknown-linux-gnu.tar.gz"
curl -fsSLO "https://github.com/scbrown/quipu/releases/download/quipu-ai-v$V/quipu-quipu-ai-v$V-x86_64-unknown-linux-gnu.tar.gz.sha256"
sha256sum -c "quipu-quipu-ai-v$V-x86_64-unknown-linux-gnu.tar.gz.sha256"
tar -xzf "quipu-quipu-ai-v$V-x86_64-unknown-linux-gnu.tar.gz"
mkdir -p ~/.local/bin
install -m 755 "quipu-quipu-ai-v$V-x86_64-unknown-linux-gnu/quipu" \
  "quipu-quipu-ai-v$V-x86_64-unknown-linux-gnu/quipu-server" ~/.local/bin/

Anywhere else, build from source (needs a Rust toolchain):

cargo install quipu-ai --locked --features full

The crate is quipu-ai; it installs quipu and quipu-server, plus two test utilities (quipu-shacl-conformance, seed-fixtures) you can ignore. Check it:

quipu --version

quipu 0.8.1

If that prints an older version, another copy is earlier on your PATH: which -a quipu.

First success in three commands

Write a rule (every Person needs a name), two people who follow it, and one who does not:

mkdir quipu-demo && cd quipu-demo
printf '@prefix sh: <http://www.w3.org/ns/shacl#> .\n@prefix ex: <http://example.org/> .\nex:PersonShape a sh:NodeShape ; sh:targetClass ex:Person ;\n  sh:property [ sh:path ex:name ; sh:minCount 1 ] .\n' > shapes.ttl
printf '@prefix ex: <http://example.org/> .\nex:alice a ex:Person ; ex:name "Alice" ; ex:knows ex:bob .\nex:bob   a ex:Person ; ex:name "Bob" .\n' > people.ttl
printf '@prefix ex: <http://example.org/> .\nex:carol a ex:Person .\n' > carol.ttl

Then load the good facts, ask a question, and try the bad one:

Shortened. The full README is on GitHub.