Charon docs · Overview

Charon

Lethe remembers. Charon carries.

Charon is a self-hosted MCP policy gateway for Lethe. It gives AI clients scoped, auditable access to Lethe memory while Lethe itself stays private.

Architecture

MCP Client (ChatGPT, Claude, etc.)
  |
  | HTTPS
  v
Cloudflare Tunnel / cloudflared
  |
  | HTTP
  v
Charon (MCP Gateway + Auth)
  |
  | Private Network
  v
Lethe / Lethe Git (memory store)

No client ever talks to the memory store directly. Every call passes through Charon's principal model: who you are, which projects you can see, which scopes you hold, and which refs you own.

What it provides

Principals and scopes

Principal profile Scopes Purpose
Author (proposer) memory.read memory.search memory.branch memory.commit memory.propose Writes owned refs, proposes merges
Reviewer memory.read memory.search memory.review memory.merge proposal.review Independent review and merge
Reader memory.read memory.search thread.read Accepted-memory recall only

The review-separation property is structural: the gateway identifies the principal and refuses self-review no matter what the client asks.

Where to go next