Hippocampus launches in October. Join the waitlist

Developers

The world's best RAG. Build on it, or prove it isn't.

Hippocampus is an external mind palace for LLMs: a layered memory that AI builds and maintains as a wiki, shared with the people who use it. Search finds the right passages without a generative model; the model only writes the answer. REST and MCP are in beta.

Overview

Where Hippocampus sits in an AI stack

Models reason, agents act and people decide. Between them and a company's documents sits Hippocampus: its services ingest, curate and retrieve, and its secure OKF wiki keeps every document as encrypted Markdown behind one set of APIs.

Identity and keys

Identity provider SSO on Corporate auth live
KMS root keys stay inside encryption keys live

Where knowledge lives

Files PDF, Word, Markdown upload live
Corporate DMS SharePoint, Drive, Box connectors not yet

Hippocampus

Thalius services IngestCurateRetrieve
Secure OKF wiki
APIsHTTP · MCP · REST
↕ cleartext
Doc vault
↔authz
Knowledge vault
↕ encrypted
Markdown storage

Who asks

MCP beta Claude Code and coding agents
MCP beta AI agents any framework
MCP beta Chat assistants Claude, ChatGPT
REST beta Apps and scripts your own code
web app live People browse, check, ask

Models it calls

model calls live AI services OpenAI and Anthropic
The blue box is what Hippocampus runs: Markdown is stored only encrypted, and the doc vault hands cleartext to the APIs alone. Everything around it stays yours or your provider's. Each line names what travels on it; dashed means not built yet, beta works today and is being completed.

Where it runs

Hippocampus runs on our cloud or on your own hosting. The product is the same in both.

Hippocampus cloud
Hosted and run by us in the EU. Get access, and the API key is in the dashboard.
Own hosting
Your own cloud, on-premises or any other environment you control. Part of the Enterprise package.

The API and MCP are identical on both. Only the base URL differs.

Own hosting is set up with us as part of Enterprise: talk to us about Enterprise

Architecture

An external mind palace

A new mental function for LLMs: an external, layered memory that AI creates and maintains, shared with the people who use it.

Hippocampus gives AI and humans a shared, well-organised external memory. It is built like Wikipedia, an intranet on steroids: complex data is summarised into short abstracts with deep links to the text they stand for.

The memory is hypertext, which is a core competence of LLMs. LLMs create and maintain it as a modern wiki, and the same pages are the ones people browse and check.

The search starts from titles and links. It follows a link to a summary when a title matters, and opens the full text only for the passage the question needs, without a generative model. The model receives only that passage, so the context stays small however large the corpus grows.

The external mind palace: context window, summaries, full textThe context window holds only the titles Data processing agreement and Employee handbook as links, and the prompt. The title Data processing agreement is followed to its summary, and a deep link in the summary is followed to one passage of the full text. The other document is not opened.CONTEXT WINDOWData processing agreementtitle · linkEmployee handbooktitle · linkpromptHow is personal dataencrypted at rest?Data processing agreementsummary · deep links1 Definitions2 Processing3 Security measures → 3.1 Encryption4 Sub-processorsData processing agreementfull text · Markdown3.1 Encryption · p. 7Employee handbooksummary · deep links1 Working hours2 Leave3 Equipment4 ConductEmployee handbookfull text · Markdown
  1. 1
    Titles and linksOne line per document or section, each one a link.Where the search starts.
  2. 2
    SummariesShort abstracts with deep links into the text.Opened by the search when a title matters for the question.
  3. 3
    Full textThe document as Markdown, with its pages and byte ranges.Opened only for the passage the answer needs.

Illustrative documents. The search path is drawn in blue; the dashed document was listed in the index but never opened.

Core properties

  • Scalable to huge datasetsThe model gets a small, relevant context: only the passages that matter, found by the search, rather than the corpus. The size of the corpus stops being the limit.
  • Built-in quality controlQuality control is part of the memory, not a separate project, and every summary can be rebuilt from the source.
  • Open by designAnswers are traceable and accountable: each one leads back to the passage, the page and the original file it came from.
  • Human in the loopPeople work in the same wiki the AI builds. They browse it and check it, and cases that need judgement are sent to a person: a core feature, not an afterthought.
  • Role-based securityAccess follows roles and permissions, so what an answer is built from is limited to what the person or agent asking may read.

Document tree

Here is the search on one document. Two funnels run over the tree built at import: one walks down from the index summary through the section summaries that match the question, the other searches the leaf sections directly with keywords and embeddings. Their results are fused into one ranking, without a generative model.

Question “How is personal data encrypted at rest?” over Data processing agreement.pdf
Document tree of Data processing agreement.pdfAn index summary, 4 section summaries and 4 leaf sections. The top-down path for the question runs through 3 Security measures, then 3.1 Encryption.Data processing agreementindex summary · pp. 1–141 Definitionssummary · pp. 1–22 Processingsummary · pp. 3–53 Security measuressummary · pp. 6–94 Sub-processorssummary · pp. 10–143.1 Encryptionp. 7bytes [18240, 19012)13.2 Access controlp. 8bytes [19012, 20330)3.3 Incidentsp. 9bytes [20330, 21104)4.1 Sub-processorsp. 10bytes [26410, 27388)2
Top-down: the path through the summaries Bottom-up: keyword and embedding hits on leaf sections
  1. 1 3.1 Encryption p. 7 · bytes [18240, 19012)
    Reached by both funnels: the path through 3 Security measures and the leaf search.
  2. 2 4.1 Sub-processors p. 10 · bytes [26410, 27388)
    Leaf search only: the passage names the processor's hosting provider.

Illustrative document and offsets. The fused ranking is what search returns; the answer is composed from those passages.

Import

FileWhat happens
.pdfText recognition with page markers, so scanned pages work. The original is kept.
.docxConverted to Markdown directly, without text recognition.
.md · .markdown · .txt · .textRead as-is with page markers added. There is no PDF original for these.

A file that was already imported is flagged as a duplicate. Progress can stream while the document is read.

Models

Answer models
OpenAI and Anthropic models, set for each workspace. In the web chat a person can pick the model per question. Changing the answer model needs no re-import.
Embeddings
Fixed for a workspace: changing the embedding model would invalidate the stored vectors, so it is not offered.
Model access
Included in the service. No provider account and no provider key to set up.

Open Knowledge Format

Every document is stored as a folder of Markdown with YAML front matter, following the Open Knowledge Format specification: a summary of the whole document, the full text, the original file, and a folder per section down to the leaf sections. Any document's Markdown can be read through the API.

Layout
contracts/
└── data-processing-agreement/
    ├── index.md                        summary of the whole document
    ├── data-processing-agreement.md    full text as Markdown
    ├── data-processing-agreement.pdf   the original (none for .md or .txt uploads)
    └── 03-security-measures/
        ├── index.md                    summary of the section
        └── 03-01-encryption.md         a leaf section
Illustrative names.

API reference

Every endpoint, parameter and response is described in a separate API reference.

API reference

Files

Developer files

Every format, for people and for AI agents.

OpenAPI 3.1

openapi.json — the endpoints of the API reference, machine-readable. Import it into Postman, Insomnia or Bruno.

Skill for coding agents

SKILL.md — setup, the main calls and the common mistakes, for Claude Code, Cursor or Codex.

MCP server card

mcp-server.json — the server's entry in the MCP registry format.

Don't believe us. Test it.

Free to start. No card, no API key, no sales call.