Blog / How-to guides

Persistent memory for Pydantic AI agents, on your own machine

25 October 2026 · Semurg · 5 min read · Markdown

Last checked on r11.132.20261027.a274a28 (27 Oct 2026): every command below ran on a fresh node of that release. The current release is r11.135.20261028.2ff2348 (28 Oct 2026), and the commands have not been re-checked on it yet (how)

pydantic-aipythonmcpagentsmemoryhow-to

Tested end to end with pydantic-ai-slim 2.62.0 and mcp 2.3.0. The release it ran on is named in the checked line at the top of this page.

A Pydantic AI agent forgets what it learned when its session ends. This guide gives it a memory that outlives the session: a Semurg node on your own machine, reached through Pydantic AI's own MCPToolset, where every fact stays on your disk and comes back cited to where it was said. Any other agent or framework that uses the same node and the same scope reads the same memory.

Your Pydantic AI program stores a fact through Pydantic AI's MCP toolset; your node keeps it in the scope you named, on your own disk; a later run, another agent or a plain HTTP call on the same scope reads it back, cited.Your Pydantic AIprogramPydantic AI'sMCPToolsetYour scope, on yournodeA later run, anotheragent, or plain HTTPtoken and scoperememberthe same fact, cited

What you need

  • An Intel or AMD x86_64 machine with Ubuntu 24.04, on Linux directly or on Windows through WSL2. One node is free, with no licence key.
  • Python 3.12, which Ubuntu 24.04 ships. We test in the official python:3.12-slim container.

Step one: install a node

On Ubuntu 24.04 (x86_64), with sudo:

bash
curl -fsSL https://one.semurg.io/install | sudo bash

The install page lists what the installer needs and what it changes. The installer ends by printing your API token, and the node keeps a copy. Put it in a file only you can read, and have every new terminal load it:

bash
mkdir -p ~/.config/semurg
(umask 077; sudo grep '^SEMURG_API_TOKEN=' /etc/semurg/semurg.env | cut -d= -f2- > ~/.config/semurg/token)
echo 'export SEMURG_API_TOKEN="$(cat ~/.config/semurg/token)"' >> ~/.bashrc
export SEMURG_API_TOKEN="$(cat ~/.config/semurg/token)"

Step two: install Pydantic AI with MCP

Ubuntu keeps its own Python packages apart, so install into a virtual environment of your own. Keep the quotes: some shells read the brackets otherwise.

bash
sudo apt install -y python3-venv
python3 -m venv ~/semurg-pydantic-ai && . ~/semurg-pydantic-ai/bin/activate
pip install 'pydantic-ai-slim[mcp]'

Step three: connect

Save the program below as snippet.py. It is the program our tests run as written, shown here from the agents page rather than copied, so what you read is always the file that ran.

Python: Pydantic AI
# Run: python snippet.py   (SEMURG_API_TOKEN must be set in the environment)
import asyncio, os
from pydantic_ai.mcp import MCPToolset

URL = os.environ.get("SEMURG_MCP_URL", "http://127.0.0.1:4000/v1/mcp")
HEADERS = {"Authorization": "Bearer " + os.environ["SEMURG_API_TOKEN"],
           "X-Semurg-Scope": os.environ.get("SEMURG_MCP_SCOPE", "default")}
FACTS = {"entities": [{"name": "Ada", "type": "person"}, {"name": "Acme", "type": "organisation"}],
         "relations": [{"source": "Ada", "target": "Acme", "type": "WORKS_AT"}]}


async def main():
    server = MCPToolset(URL, headers=HEADERS)
    async with server:
        await server.direct_call_tool("memory_remember", {"facts": FACTS})
        print(await server.direct_call_tool("memory_recall", {"subject": "Ada"}))


asyncio.run(main())

Ran: this exact file, end to end against a fresh node on release r11.132.20261027.a274a28 in python:3.12-slim, with pydantic-ai-slim 2.62.0, mcp 2.3.0. Install: pip install 'pydantic-ai-slim[mcp]'. Its run record and every other framework: /agents.

It reads your token from SEMURG_API_TOKEN, the node's address from SEMURG_MCP_URL (without it, http://127.0.0.1:4000/v1/mcp) and the scope from SEMURG_MCP_SCOPE (without it, the scope named default). It opens an MCPToolset with the token and the X-Semurg-Scope header, stores two facts with memory_remember (Ada works at Acme) and prints what memory_recall returns for Ada.

Step four: run it

Give the program a scope of its own, so it never writes into a memory you use for real work:

bash
export SEMURG_MCP_SCOPE=try-pydantic-ai
python snippet.py

It prints the node's answer for Ada as Pydantic AI hands it back: state set to answered and the WORKS_AT fact that links Ada to Acme, each item cited. Storing the same facts again changes nothing, so it is safe to run twice.

Now read the same fact from outside Pydantic AI, over plain HTTP. What one client writes, any other client on the same node and scope reads:

bash
curl -sS http://127.0.0.1:4000/v1/memory/recall \
  -H "Authorization: Bearer $SEMURG_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"scope":"try-pydantic-ai","subject":"Ada"}'

The memory tools in Pydantic AI

The toolset lists every memory tool under its own name, and the program calls them with direct_call_tool. The same toolset is what you give a Pydantic AI agent, and the model then chooses (our test calls the tools directly, without a model).

  • memory_status: reports whether shared memory is on for this node and which of your scopes hold facts.
  • memory_remember: stores entities, the relationships between them and the passages they came from, or plain text, with an optional source label and date.
  • memory_recall: recalls what is stored about one named entity, its own facts first, each item cited.
  • memory_relate: adds one typed relationship between two entities in a scope, creating an end that is not stored yet.
  • memory_context: answers a question in plain words with cited items and a verdict on whether the store covers it.
  • memory_document: takes a whole document (PDF with a text layer, Word, HTML or plain text) and stores it as cited passages in a scope.
  • memory_forget: deletes one thing per call: an entity and everything that names it, one fact, one document, every document under a source label, or the whole scope. It is unreachable at once and not yet wiped from the disk.
  • memory_export: reads everything a scope holds, one page per call: send each reply's next back as cursor until it is empty. The records are the entities, the facts with their dated sources and whether each is current or ended, and each stored document once; a forgotten passage is never exported.
  • memory_import: stores the records memory_export produced into any scope, through the same writes memory_remember makes. A page sent twice stores nothing twice, and the reply names every record it skipped.

Every answer says its state: answered, nothing_stored (nothing stored matched, so the agent should say it does not know) or could_not_judge.

Troubleshooting

  • KeyError: 'SEMURG_API_TOKEN': the token is not in this shell. Run the last line of step one, or open a new terminal.
  • A refused token can come back as a general error without the reason. Check the token first: read it again from the node as in step one.
  • After the node restarts (an update restarts it), an open MCPToolset did not recover by itself in our October 2026 restart test, run on an earlier release, while a new one answered at once. Leave the async with block and open a new toolset.
  • If the node is up but stalled, a plain client waits as long as its own timeout allows. Set the per-call timeout your framework offers, so an agent that cannot reach its memory says so quickly.
  • error: externally-managed-environment from pip: you are outside the virtual environment. Activate it with . ~/semurg-pydantic-ai/bin/activate.

Use 127.0.0.1 rather than localhost: on Ubuntu localhost can resolve to the IPv6 address first, and the node listens on IPv4 loopback only. To reach a node on another machine, set SEMURG_MCP_URL, or forward its port with ssh -N -L 4000:127.0.0.1:4000 you@your-node.

Next

This post was written with AI assistance. Every result in it is checked against a published release or record before the post goes out.

How these commands were checked

Our test farm ran each program shown from /agents, the very file our test farm ran end to end, against a fresh node of the published release r11.132.20261027.a274a28. A post is published only when every one of them passed there.

Related