Ghost memory: why agents can't tell what's true now
Ghost memory is when old, current, and changed facts sit in an agent's memory and get retrieved together. Deleting loses history. Labeling the edge works.
Every agent you work with, reading and writing to the same place.
Put in your docs, data, and notes, then connect Claude, Codex, or anything else with a single link.
Upload files, let agents write entries directly, or push through the API. It all lands in one container that any MCP client can read.
Add context
Access anywhere
Containers
Each container is an isolated, permissioned environment for context, with its own database, MCP server, and API. Spin one up per person, team, project, or anything else. Every connected agent gets scoped access to only what it needs.
Every container is locked down by default. Connected agents only see what they have been scoped to.
Flip a container to public for read-only access when sharing openly makes sense. Any agent can connect.
Create a container in seconds. Delete it when it is no longer needed. Connect an agent to whichever container fits the work.
Intelligence
Wire analyzes everything inside a container and builds connections across it. Semantic neighbors, related claims, entity links, composites, time. Agents pivot from any result through whichever edges fit the question.
Collaboration
A container is the meeting point. Connect as many agents and people to it as the work calls for, each with scoped access. Updates are live, so every connection sees the same context at the same time.
Privacy and security
Four questions decide whether you can trust an agent with something that matters: what it can reach, who allowed it, whether you can prove it, and whether you can take it back. Every container answers all four.
What can it access?
Every context container has its own storage and MCP endpoint. Containers do not share state. Credentials are scoped per container, and none of them escalate to other containers, other users, or org-wide access. The answer is the container boundary itself.
Who authorized it?
Each container has its own policies. Credentials are scoped per container, with a per-credential tool allowlist on top. Your agent only ever sees the tools you granted, on the container the credential scopes to. Access exists because someone granted it, and the grant is on record.
Can you prove it?
Two layers are on the record: every action an agent takes through a scoped credential, and every management change (creation, sharing, archival, member changes). What was done, when, on whose authority. Compliance evidence, incident response, and customer-facing transparency come from the same trail.
Can you revoke it?
Revoke a credential and access ends, without redeploying the agent or touching anything else. Sharing is explicit and per container, so anything that was granted can be ungranted, one agent at a time or all at once.
Need self-deployment, region pinning, or a custom DPA? Talk to us.
Everything you need to know about Wire.
Still have questions? Get in touchContext engineering, AI agents, and what we're learning.
Ghost memory: why agents can't tell what's true now
Ghost memory is when old, current, and changed facts sit in an agent's memory and get retrieved together. Deleting loses history. Labeling the edge works.
Agentic RAG fails before the reasoning starts
A 12,000-trajectory study finds agentic RAG agents finalize answers without reading retrieved evidence. Forcing one read gains up to 19.9 accuracy points.
JSON mode changes what your model answers
Across 44 language models, asking for JSON collapsed answer diversity: distinct answers fell from 52 to 36 and the top answer rose from 41% to 64% of responses.
Connect Claude, Codex, Cursor, or anything else that speaks MCP.