MultiPass keeps your memory, profile, and connected tools — Notion, email, calendar, GitHub, Slack — in a container behind one URL. Paste it into any MCP-enabled AI and it knows you. Hit a cap, switch providers. Go local when it's private. Leave whenever — the context comes with you.
01 /Why MultiPass
Tuesday, mid-task: Claude tells you to come back Thursday. Or ChatGPT closes the session at the worst possible moment. The work didn't pause. The quota did.
Open another provider — or your second account — and pick up the exact thread. Same memory, same context. The new session already knows where you were, because your memory never belonged to the app that stopped.
Health. Legal. Money. Family. Some conversations shouldn't travel to a data center — but the model that stays home shouldn't have to meet you as a stranger.
Run a private model on your own machine, with your full memory and profile. Private and personal at the same time — you were never supposed to choose. When the heavy reasoning calls, swap back to a frontier model without skipping a beat.
Claude keeps one memory of you. ChatGPT keeps another. Each lives on that vendor's servers, on that vendor's terms — and the longer you stay, the more it costs to go. That isn't loyalty. It's leverage.
Move whenever you like — cancel a subscription, try the new model, run two side by side. A model you've never used knows you on day one.
02 /How it works
A container spins up for you — yours alone, isolated from every other customer. You get one URL.
Notion, email, calendar, GitHub, Slack. Each one a scoped tool you can revoke as fast as you added it.
Into Claude, ChatGPT, Cursor, a local model. One consent screen later, it knows you. All of them do.
03 /Connectors
Each connector is a live bridge to a source you already use, handed to your AIs as scoped, revocable tools. Your first connectors are included — extras are €2/mo each.
Scope-gated — an assistant only reaches what you grant · More on the way
04 /The sensitive vault
Health. Legal. Family. Residency. These live in a separate vault — encrypted apart from the rest of your context, with consent granted per category, per client.
When an AI connects, you see exactly what it asks for — and exactly what it doesn't get. A coding assistant has no business knowing your medical history. So it doesn't.
Vault categories: health · legal · family · residency
Consent: per category, per client · revocable anytime
multipass.host/consent
Claude wants to connect
05 /Open protocol
MultiPass is the managed way to run PCP — the open Portable Context Protocol. The spec, the server, the export format: all public. If the price ever rises, the service degrades, or the company disappears, you take your export and self-host the same thing. That exit is the reason to trust the paid version.
06 /Pricing
Portable memory + profile. Take your context to any AI.
per person · VAT excl.
Your whole digital life — sources, memory, and the vault.
per person · VAT excl.
Everything connected. First in line for what's next.
per person · VAT excl.
Extra connectors €2/mo each · upgrade, downgrade, cancel anytime · full export on every tier, always
07 /Questions
Exactly what the consent screen shows. Memory and profile by default; connected sources if you allow them; vault categories only if you grant each one explicitly. Every scope is revocable, per client, at any time.
Portable Context Protocol — an open protocol for serving personal context over MCP. The spec and reference implementation are public under Apache 2.0. MultiPass is a managed PCP host; anything it does, you can self-host.
Yes. One click produces a complete archive — memory, profile, vault, connector configuration — in the open PCP export format: a directory of files you can read, and that any PCP server can import. No proprietary blobs.
In a container provisioned for you alone, in the EU. No shared databases, no pooled indexes. Vault categories are encrypted separately from the rest of your context.
Anything that speaks MCP: Claude, ChatGPT, Cursor, and local models through an MCP client. Paste your URL, pass one consent screen, and the tool has your context.
Export first — it's one click and always available. After cancellation your container is kept encrypted for 30 days, then destroyed. Or skip the wait: take your export and self-host PCP the same day.
08 /Get started
Your memory is the story you keep telling yourself about who you are. Lately you've been telling parts of it to machines you don't own. Keep the original — exportable, self-hostable, shared scope by scope, on an open protocol.