docs: clarify memory capabilities and keyless onboarding

[izgorodin]

What changes

Documentation and onboarding-link improvements:

• Remove the stale claim that the current local MCP package still exposes delete tools, and the absolute OAuth safety guarantee.
• Clarify that a corrective memory_write is not structured supersession; supersedes, include_history, and chain access belong to the documented REST surface.
• Describe vault_list as aliases and metadata, not secret values.
• Add a short synthetic cross-tool save/read check, with the same account and exact domain, a fresh chat, and inspection of the tool result.
• Point the manifest homepage directly to the existing Remote OAuth section, so the keyless plugin's documentation link does not begin with the separate API-key setup path.

Evidence and verification

• Current public remote contract: https://mcp.mnemoverse.com/.well-known/mcp/server-card.json
• Remote/local parity and deletion boundary: https://mnemoverse.com/docs/api/remote-mcp-server
• Removal in 0.9.0: https://mnemoverse.com/docs/api/mcp-server
• Supersession API: https://mnemoverse.com/docs/api/reference
• Standing recall/save guidance: https://mnemoverse.com/docs/api/agent-memory
• Homepage target: https://mnemoverse.com/docs/api/cursor#remote-oauth ; live HTML contains id="remote-oauth" and the browser-sign-in instructions. JSON parses, and homepage is the only manifest field changed.
• git diff --check passes; independent AI editorial check passed against the public sources.
• The README smoke check is an instruction for users, not a runtime test result. No memories were written for this change.

Changed files: README.md and the homepage documentation URL in .cursor-plugin/plugin.json. No runtime, rule, skill, authentication, contact-address, version/release, or Marketplace-submission changes. The new homepage link is proposed in this PR; it is not live on main until review and merge.

AI disclosure: Codex authored and checked this documentation change on behalf of izgorodin.

Summary by CodeRabbit

• Documentation
  • Clarified the available remote tools, including shared-room tools and metadata returned by vault_list.
  • Documented that deletion is handled administratively through REST rather than MCP.
  • Clarified that corrections require a new memory write and are not automatically superseded.
  • Added a procedure for verifying recall across tools.
  • Updated the plugin homepage link to point directly to the remote OAuth documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: c683f729-8216-4a9c-a37f-e9e947c15f13

📥 Commits

Reviewing files that changed from the base of the PR and between ca44b11 and 144d81d.

📒 Files selected for processing (1)

• .cursor-plugin/plugin.json

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

---

📝 Walkthrough

Walkthrough

The README documents the remote tool surface, REST-only deletion, correction semantics, and cross-tool memory verification. The plugin homepage now links to the remote OAuth documentation.

Changes

Remote Tool Documentation

Layer / File(s)	Summary
Tool surface and verification guidance README.md	The README documents shared-room tools, vault_list metadata, REST-only deletion, correction through a new memory_write, and cross-tool verification steps.
OAuth documentation link .cursor-plugin/plugin.json	The plugin homepage URL now targets the remote OAuth documentation section.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 144d8

This documentation-only change introduces no identified runtime or deployment risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the documentation updates about memory capabilities and remote, keyless onboarding.

---

_{A rabbit reads the tools with care
OAuth links now point there
Memories write, then memories read
Clear correction steps proceed
REST handles deletes with grace
Documentation finds its place}

_{Comment @coderabbitai help to get the list of available commands.}