Open Source Tools

Five Apache 2.0 licensed CLI tools that pair with VEKTOR vector DB migration, MCP config sync, universal AI integration, cryptographic proof-of-authorship, and VPS anomaly detection. Free forever, zero lock-in.

// OPEN SOURCE APACHE 2.0

Vex Vector Exchange

Cross-standard vector DB migration. Export, import, and migrate agent memory between any vector store using the open .vmig.jsonl interchange format. One file. Any store. No lock-in.

Zero re-embedding pure matrix projection, no API cost
12 connectors: Qdrant, Pinecone, Redis, Milvus, Neo4j + more
Portable .vmig.jsonl format vendor-neutral, inspectable
Apache 2.0 licensed use in commercial projects free, forever
12
connectors
$0
API cost
Apache 2.0
licence
npx vex migrate --from vektor --to qdrant
// CONNECTORS
STORE EXPORT IMPORT
vektor
jsonl
pinecone
qdrant
chroma
weaviate
pgvector
redis
milvus
neo4j
claude-export
chatgpt-export
Apache 2.0 · Node.js ≥18 · zero dependencies
// MIGRATION IN PROGRESS
vektor
.vmig.jsonl
qdrant
ready 0 / 247 records
// NEW PHASE 4

@vektormemory/vex-adapter

Translate vectors between embedding model spaces using pre-trained linear projection weights no API calls, no re-embedding, pure matrix multiply. Switch models without losing your memory.

bge-small → text-embedding-3-small bge-small → text-embedding-3-large bge-base → text-embedding-3-small e5-large → text-embedding-3-large + 3 more bundled pairs
npm install -g @vektormemory/vex-adapter
// OPEN SOURCE APACHE 2.0

Vek-Sync MCP Config Sync

Keep your MCP server configurations in sync across every AI editor you use. One source of truth for all your mcp.json configs. Edit once, sync everywhere. No drift, no duplication.

11 editors supported Claude, Cursor, VS Code, Windsurf + more
AES-256-GCM Passport Vault credentials encrypted at rest
Single mcp.json source of truth edit once, propagate everywhere
Apache 2.0 free forever, zero cloud dependency
11
editors
1
source file
$0
forever
npm install -g @vektormemory/vek-sync
// UNIQUE FEATURE
AES-256-GCM Passport Vault

Your MCP credentials API keys, tokens, secrets are encrypted at rest using AES-256-GCM with OS-bound key derivation. No plaintext config files. No secrets in git. Credentials travel with the sync, not around it.

AES-256-GCM OS-BOUND KEYS ZERO PLAINTEXT
// CONNECTORS
EDITOR CONFIG PATH SYNC
Claude DesktopClaude Desktop app
CursorCursor editor
VS Code.vscode/mcp.json
WindsurfWindsurf by Codeium
Claude CodeClaude Code CLI
Clinesaoudrizwan.claude-dev
Roo Coderooveterinaryinc.roo-cline
GeminiGemini CLI
CopilotGitHub Copilot CLI
Continuecontinue.continue
CodexCodex CLI TOML
Apache 2.0 · Node.js ≥18 · zero dependencies
// SYNC IN ACTION
SOURCE → SYNCING → 11 EDITORS
// BLOG ARTICLE
MCP Sync: One Config File to Rule Them All

How Vek-Sync eliminates config drift across every AI editor on your machine.

Read Article →
// OPEN SOURCE APACHE 2.0

Via Universal AI Integration

Route context, tasks, and memory across every AI tool you use. Connect Claude, Cursor, Windsurf, ChatGPT, and LangChain to a shared bus so your work follows you across every tool, every session, every machine.

Codebase graph indexing instant project context for any agent
Shared context bus Claude, Cursor, Windsurf, ChatGPT in sync
MCP server with 8 tools file conversion, watch, scaffold + more
Apache 2.0 free forever, zero cloud dependency
5+
AI tools
8
MCP tools
$0
forever
npm install -g @vektormemory/via
// UNIQUE FEATURE
Self-Improving Prompt Engine

v0.4.0 Self-improving prompt engine that learns from your codebase history. Every correction stored. Every success a reusable pattern. Team task board, live AI comparison, batch file conversion, and semantic memory search. Works with Claude Code, Codex, Gemini CLI, Cursor, Windsurf.

VIA PROMPT TEAM BOARD DIFF LIVE
// TOOLS & INTEGRATIONS
TOOL DESCRIPTION
ClaudeShared context + memory bus
CursorCodebase graph + task routing
WindsurfSession context sync
ChatGPTCross-tool memory handoff
LangChainAgent context injection
File watcherAuto-index on change
ScaffoldProject structure templates
File convertFormat conversion MCP tool
Apache 2.0 · Node.js ≥18 · zero dependencies
// CONTEXT ROUTING
PROJECT → ROUTING → ALL TOOLS
// OPEN SOURCE
Universal AI Integration Layer

Route context and tasks across Claude, Cursor, Windsurf, ChatGPT, and LangChain from one shared bus.

View on GitHub →
// OPEN SOURCE APACHE 2.0

Provenance Cryptographic Proof-of-Authorship

Evidence, not access control. Stamp proprietary headers into your source, snapshot into a Merkle-tree manifest bound to git commit, and dual-anchor timestamps via RFC 3161 + OpenTimestamps. C2PA compliance verified.

v1.1.3 • 27 formats verified • C2PA round-trip testing
Merkle-tree manifest snapshot, bound to your git commit hash
Dual-anchored timestamps RFC 3161/FreeTSA + OpenTimestamps/Bitcoin
Pairs with a licence/EULA proof of authorship, not a lock
Apache 2.0 licensed use in commercial projects free, forever
5
subcommands
2
timestamp anchors
Apache 2.0
licence
VIEW ON GITHUB npm install -g @vektormemory/prov
// SUBCOMMANDS
COMMAND DESCRIPTION
prov initSet up config & proprietary header templates
prov stampStamp proprietary headers into source files
prov manifestSnapshot codebase into a Merkle-tree manifest
prov timestampDual-anchor via RFC 3161/FreeTSA + OpenTimestamps
prov verifyVerify a manifest & its anchored timestamps
Apache 2.0 · Node.js ≥18 · zero dependencies
// MANIFEST + DUAL-ANCHOR
commit
merkle manifest
RFC 3161
ready 0 / 5 subcommands
// OPEN SOURCE APACHE 2.0

Vörwatch VPS Anomaly Detection

Lightweight, dependency-free VPS anomaly detection in a single bash script. File integrity, port baselining, package vulnerability scanning, rootkit detection, and CIS hardening checks no daemon, no database, no cloud dashboard. Recommend-only: it never bans, blocks, or touches iptables on its own.

Package vulnerability scanning via OSV.dev no API key required
Rootkit & backdoor scanning shells out to chkrootkit / rkhunter
File integrity, port & process baselining, threat-blocklist cross-reference
Apache 2.0 licensed use in commercial projects free, forever
10
detection checks
$0
API cost
Apache 2.0
licence
VIEW ON GITHUB npm install -g @vektormemory/vorwatch
// UNIQUE FEATURE
Recommend-Only, Never Auto-Bans

Every alert tells you the exact command to run yourself Vörwatch never runs ufw deny, never calls fail2ban-client banip, never touches iptables. Zero daemon, zero database one bash file, runs off cron, state lives in flat files.

CRON-DRIVEN TEXT + JSON REPORTS EMAIL DIGEST
// WHAT IT CHECKS
CHECK DESCRIPTION
File integritySHA-256 baseline of sshd_config, shadow, crontab + more
Listening portsFlags new ports not in your captured baseline
Outbound IPsFirst-seen connections cross-checked vs. threat blocklist
Process treesFlags e.g. nginx spawning a shell
SSH authRecent connection attempts vs. known-bad IPs
nginx trafficRequest-volume + 404-scanning anomaly detection
Package vulnsInstalled packages checked against OSV.dev, batched call
Rootkit scanVia chkrootkit / rkhunter, rate-limited independently
CIS hardeningsshd config + critical file permission spot-checks
DNS anomaliesOptional first-seen outbound DNS query tracking
Apache 2.0 · Bash + coreutils · zero runtime dependencies
// CHECK CYCLE
BASELINE → CHECK → REPORT
// OPEN SOURCE
VPS Anomaly Detection, One Bash File

File integrity, package vulnerabilities, rootkits, and hardening drift recommend-only, never auto-bans.

View on GitHub →