For agentic work
Cross-thread recall of PDFs, images, packages, and notes without re-uploading into every chat. Hierarchical prefixes keep projects and owners sane.
MCP server · Content Object vault
Durable artifacts for agents—not another chat notepad.
Artifactum is the durable Content Object vault that survives throwing away a chat. MCP is the control plane; object storage is the data plane. Any MCP client. Not chat fact-memory, not a human PKM, not a Drive clone.
Invite-only today (one operator vault). The product we sell is dedicated tenancy—hosted or in your AWS—not a shared multi-tenant SaaS. Connector details are issued after review—not published here. Request-access form is on Tally (their privacy policy applies there); Estes Advisory privacy notice.
Product
What Artifactum is
Most “memory” tools keep short text in a vector store. Artifactum is a
Content Object vault: durable objects with identity
logical_key, real size, content type, and a trusted storage
URI—plus search and list when you need discovery. MCP control plane, S3 (or compatible)
data plane.
MCP-first surface
Upload URL, finalize, list, search, get, move, and soft-delete—so clients that speak MCP can operate the vault without a bespoke SDK.
What it is not
Not Mem0-class chat fact-memory. Not Obsidian or Notion. Not a Drive folder with MCP bolted on. Those tools have jobs; Artifactum is the vault that outlives a thread.
Companion, not a replacement
Draft in Obsidian or Drive if that is where humans already write. Promote decisions, decks, and harvests into Artifactum keys so every MCP client shares one source of truth.
Why dedicated
Sovereignty, provenance, blast radius
Shared multi-tenant SaaS is not the product we are building. Customer isolation is one vault, one AWS account. Connecting any object store to an agent still means the model may see what it is allowed to get—that is true here too.
Sovereignty
Dedicated tenancy: objects live in an account whose encryption key you can control, disable, or take with you. At rest is yours. Isolation is the account, not a customer tag on someone else’s bucket.
Provenance
Promote originals into named keys. Content hash and durable bytes stay with the object so agents can cite this digest, this vault, this time—a chain of custody, not a copyright registry.
Blast radius
A leaked token or a disabled key is that vault, not a shared pool. One customer’s incident is not everyone else’s objects.
How it works
Boring reliability over clever memory
-
Name the object with a dot-notation key
owner.category.slug. - Upload bytes via a short-lived signed URL into the trusted content bucket.
- Finalize metadata (size, type, summary) so list/search/get stay honest.
- Recall with prefix list, search, or exact get. Clients that can HTTP GET use a short-lived download URL; some hosts need in-tool bytes instead—see known issues.
Hosted is on a public price. Plans. Getting started.
Clients
What works today
Any MCP client is in scope. Public status is honest.
Working
Cursor — Streamable HTTP + Bearer.
Grok Web and Grok iOS — hosted connector sign-in.
Grok Build CLI — Bearer is the daily Mac path.
Claude.ai — custom connector (typical read is the download URL;
Claude cannot GET it, so use get_content_for_llm). Human vault UI at
app.artifactum.ai.
Not green yet
Claude Code, Claude Desktop, ChatGPT MCP, and Codex are not a public pass. Details: docs.
Principles
Design choices that keep the vault honest
Real bytes
Objects live in object storage—not only as embeddings or chat paste.
Stable identity
Keys are product convention, not throwaway thread IDs.
Client-honest
Prefer download URLs for binaries when the host can fetch them. Do not stuff large bodies into model context by default.
Access
Hosted is on a public price
Hosted is $49/month or $490/year: your own vault stack (compute, bucket, key, index) that we run. Plans and Terms. Dedicated (a separate AWS account you can later take) remains a conversation — same Tally form, say Dedicated.
Hosted checkout is issued when we can give you an MCP URL — we do not keep a card charge without a vault. Dedicated review still uses Tally (new tab).
Company
A product of Estes Advisory
Artifactum is designed and operated by Estes Advisory LLC—cloud, data, and AI production advisory with an operator bias: make the durable path boring and correct.
Engagements often start as advisor-operated infrastructure in client-owned accounts. Productization proceeds without rewriting the Content Object model.
Privacy
Cookieless by default on this site
This marketing site does not set advertising cookies, and we do not use Google Analytics. Aggregate traffic uses cookieless Plausible Analytics (a tracker without cookies or ad identifiers). See their data policy. Fonts are self-hosted here (no Google Fonts). Full notice: estesadvisory.com/privacy.html.
The “Request access” form opens on Tally’s domain so form cookies (if any) stay off this origin. CloudFront access logs may be retained briefly for ops forensics.