{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-13T23:52:59.204Z",
  "record_id": "VXI-EXT-TOOL-TRUST-QDRANT-01-v1",
  "record_kind": "external_reference",
  "title": "Qdrant MCP: Retrieval scope and persistent memory writes",
  "system": "Qdrant MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can a retrieval agent search Qdrant without adding persistent memories?",
  "near_questions": [
    "Does Qdrant MCP have a read-only option?",
    "Can Qdrant MCP store conversation memories?",
    "Which Qdrant collection will an agent search?",
    "Does a Qdrant API key authenticate remote MCP clients?",
    "What metadata can Qdrant MCP persist?",
    "Can disabling qdrant-store limit memory changes?",
    "Does semantic similarity establish that a retrieved memory is true?",
    "Where is information saved by Qdrant MCP?",
    "Which Qdrant deployment transport is configured?",
    "What evidence is needed before exposing Qdrant MCP remotely?",
    "Can an agent search Qdrant without permission to add memories?",
    "What should change review cover after a Qdrant key rotation?"
  ],
  "supported_claims": [
    {
      "claim": "The official Qdrant MCP server separates finding stored information from storing new information. Its read-only option disables the store tool. Review the collection, database credential and deployment transport separately; a retrieval setting does not establish who can reach a remotely exposed server.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The official Qdrant MCP server separates finding stored information from storing new information. Its read-only option disables the store tool. Review the collection, database credential and deployment transport separately; a retrieval setting does not establish who can reach a remotely exposed server.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-MONGODB-01-v1",
    "VXI-EXT-TOOL-TRUST-SNOWFLAKE-01-v1",
    "VXI-EXT-TOOL-TRUST-PINECONE-01-v1",
    "VXI-EXT-TOOL-TRUST-CLICKHOUSE-01-v1",
    "VXI-EXT-TOOL-TRUST-REDIS-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Qdrant official MCP read and memory-write capabilities",
    "source_url": "https://github.com/qdrant/mcp-server-qdrant",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-QDRANT-01-v1",
    "candidate_record_sha256": "7240361e81d1904b49f9f626535c859383653a89b64a5d5a9efcc4c1d0b20e4c",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The official Qdrant MCP server separates finding stored information from storing new information. Its read-only option disables the store tool. Review the collection, database credential and deployment transport separately; a retrieval setting does not establish who can reach a remotely exposed server.",
    "required_buyer_context": "Deployment transport, target collection, database API key, read-only option and MCP client identity.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Qdrant MCP",
      "variant": "Official qdrant/mcp-server-qdrant deployment selected by the operator"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Qdrant publishes the server; the operator chooses its deployment and database.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "The server stores and retrieves semantic memories in Qdrant.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "The find tool retrieves matching stored information from the selected collection.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "The store tool persists information and optional metadata; QDRANT_READ_ONLY disables that tool.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "A Qdrant API key can authenticate the database connection; the selected MCP transport needs its own access review.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Collection configuration and database authorization remain distinct from disabling the store tool.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Search output reaches the agent client; stored information persists in the configured Qdrant database.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "An unintended collection or a reachable remote listener can widen the intended retrieval boundary.",
        "source_ids": [
          "qdrant-main"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Database-key scope, remote client authentication, retention and embedding deployment have not been verified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Resolve collection and caller scope before retrieving private memory; obtain task authority before storing new material.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "qdrant-main",
        "url": "https://github.com/qdrant/mcp-server-qdrant",
        "final_url": "https://github.com/qdrant/mcp-server-qdrant",
        "title": "Qdrant official MCP read and memory-write capabilities",
        "checked_on": "2026-10-14",
        "sha256": "48834b5202bb72b6c018fabebf383562e9a3e96cf311bf256b71e2f44b6fc03c",
        "bytes": 439014
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Preserve which memory collection and read-only assumptions supported a retrieval decision.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck collection routing, transport exposure, database credentials and store-tool availability."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#qdrant-mcp-memory-write-trust",
  "machine_readable_record": "/varexis-index/records/qdrant-mcp-memory-write-trust.json"
}