---
title: "compartment"
description: "High-security, fully offline, encrypted vector memory for AI agents. AEAD-encrypted vault, locked by default after restart, no API key and no network at runtime."
canonical: https://agentpluginsdirectory.com/plugins/compartment
last-updated: 2026-09-22
---

# compartment
High-security, fully offline, encrypted vector memory for AI agents. AEAD-encrypted vault, locked by default after restart, no API key and no network at runtime.
- Slug: compartment
- Publisher: Max Freedom Pollard
- Repository: https://github.com/MaxFreedomPollard/Compartment
- Manifest: plugin.json
- Version: 4.10.0
- License: Apache-2.0
- Category (editorial): agent-tooling
- Skills: 1 (compartmentalize)
- MCP servers: 1 (compartment)
- Stars: 582
- Repository created: 2026-07-20
- Repository last pushed: 2026-09-17
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/compartment
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What compartment does, in the publisher's words

Encrypted, fully offline memory for AI agents. One vault on your own computer, read and written by Claude Code, Claude Desktop, Hermes Agent, OpenClaw, Cursor, Codex and any other MCP client. No API key, no account, no network, no telemetry.

One-click install (after pip install compartment && compartment init):

Claude Code, Claude Desktop, Hermes Agent and OpenClaw are wired by one command instead: compartment integrate claude, hermes or openclaw.

- compartment unlock and compartment lock do what the buttons do. Agents can lock with the memory_lock tool. (Vaults from older versions that were issued a recovery phrase still accept it.)
- compartment 2fa enable adds a second factor: your passphrase plus a keyfile, for example on a USB stick. Both feed Argon2id together, so the requirement is enforced by the cryptography, not by a setting; a stolen vault file plus your passphrase opens nothing without the keyfile. The keyfile's location is remembered, so unlocking feels the same while it is present.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/MaxFreedomPollard/Compartment/HEAD/README.md

## Skills

- compartmentalize: Sweep this conversation and save everything potentially worth knowing again into Compartment, the encrypted memory vault. Run it before compacting or summarizing so nothing is lost to the summary, or on its own at any point to bank the session.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

## MCP servers

- compartment: transport: stdio; command: compartment --caller agent-plugin serve

Read from the plugin's own mcp.json. Environment variable names only, never values.