Deploy

Helm (recommended)

The charts/engram chart deploys the engram server and a Qdrant instance together.

Install

helm install engram oci://ghcr.io/seanb4t/charts/engram \
  --namespace agent-memory \
  --create-namespace \
  --set memory.litellm.url=http://litellm.litellm.svc.cluster.local:4000 \
  --set memory.oidc.issuer=https://auth.example.com

Key values

The chart sets MEM_* environment variables from these Helm values. Supply the cluster-specific ones via --set or a valuesObject:

Helm value	MEM_* variable set	Description
memory.listenAddr	MEM_LISTEN_ADDR	Listen address (default :8080)
memory.mcpPath	MEM_MCP_PATH	MCP transport path (empty → /mcp; / restores the legacy root catch-all)
memory.litellm.url	MEM_LITELLM_URL	Embeddings endpoint URL (cluster must supply)
memory.embed.model	MEM_EMBED_MODEL	Embed model name (default ollama/bge-m3)
memory.embed.dim	MEM_EMBED_DIM	Vector dimension (default 1024)
memory.qdrant.collection	MEM_QDRANT_COLLECTION	Qdrant collection name (default memory)
memory.oidc.issuer	MEM_OIDC_ISSUER	OIDC issuer URL; setting it enables bearer-token enforcement
memory.oidc.audience	MEM_OIDC_AUDIENCE	Expected OIDC audience (optional)
memory.oidc.resourceMetadata	MEM_OIDC_RESOURCE_METADATA	WWW-Authenticate resource metadata URL (optional)

MEM_QDRANT_ADDR is set automatically by the chart to the in-cluster Qdrant service address and does not need a Helm value.

The MEM_LITELLM_KEY value comes from a Kubernetes Secret (memory.litellm.keySecret).

For the full environment variable reference, see Configure.

Upgrade

helm upgrade engram oci://ghcr.io/seanb4t/charts/engram \
  --namespace agent-memory \
  --reuse-values

Docker

For local or non-Kubernetes deployments, use the image from GHCR:

docker run -d \
  --name engram \
  -p 8080:8080 \
  -e MEM_QDRANT_ADDR=host.docker.internal:6334 \
  -e MEM_LITELLM_URL=http://host.docker.internal:4000 \
  -e MEM_EMBED_MODEL=ollama/bge-m3 \
  -e MEM_OIDC_ISSUER=https://auth.example.com \
  ghcr.io/seanb4t/engram:latest

No volumes needed — all state lives in Qdrant. Run a separate Qdrant container (see Quickstart) and point MEM_QDRANT_ADDR at it.

The MCP endpoint is served at http://host:8080/mcp by default. Set MEM_MCP_PATH=/ to restore the pre-0.7 behavior where the transport answered at the bare root.