Mastra integration
Add long-term agent memory to Mastra agents with processors and tools
Keep retrieved context out of privileged instructions
Zep context can include content that your users, documents, or tools supplied. A system or developer message gives that content higher instruction priority than ordinary input. Some convenience integrations use system-message injection. Use direct SDK retrieval or an actual retrieval tool call unless all stored content is application-authored and trusted. Follow Memory security best practices for provider-specific placement.
Mastra agents using Zep gain long-term memory backed by a temporal knowledge graph. The @getzep/zep-mastra package provides two complementary surfaces:
- Automatic memory for trusted content —
createZepProcessorsbuilds aZepInputProcessor/ZepOutputProcessorpair that plugs into Mastra’s nativeinputProcessors/outputProcessorspipeline. The input processor inserts context into a system message. - Tools —
createZepToolsetbuildszepRemember/zepSearch/zepContexttools that let the model decide when to persist or recall. Use retrieval tools for end-user or third-party context.
Core benefits
- Automatic memory loop for trusted content: Processors can inject application-authored context and persist each completed turn
- Model-in-the-loop tools:
zepRemember,zepSearch, andzepContextdrop straight into anAgent’stoolsrecord - Per-call identity: Resolve
userId/threadIdfrom Mastra’srequestContextso one processor or tool instance serves many end users - User and standalone graphs: Bind to a user’s personal graph or a shared knowledge base
- Graceful degradation: A Zep outage is logged and surfaced as a non-fatal result — it never crashes the host agent
How it works
The processors sit on opposite sides of the model call:
ZepInputProcessorruns before the model is called. It extracts the latest user message, retrieves a Zep context block (thread.getUserContext, or a customcontextBuilder), wraps it withcontextTemplate/formatContext, and injects it as a system message.ZepOutputProcessorruns after the model responds. It persists the completed turn — the latest user message plus the assistant’s response — to the bound thread via a singlethread.addMessagescall. The assistant text persisted is the final step’s text; when generation ends mid-tool-loop (finishReason === "tool-calls"), the user message is still persisted.
Because injection and persistence sit on opposite sides of the model call, it’s safe to enable both processors together — they don’t interfere with each other. Every Zep call is wrapped: a missing threadId or any Zep failure degrades gracefully — messages pass through unchanged, a warning is logged — and the input processor never calls abort() or throws into the agent loop.
Zep is a temporal knowledge graph, not a row-oriented message store, so the package exposes Zep’s two real operations — persist and retrieve — through processors and tools rather than a MastraStorage adapter, which would require CRUD operations a temporal knowledge graph can’t honor faithfully.
Installation
Requires Node.js 20+, @mastra/core>=1.42.0 (peer), @getzep/zep-cloud>=3.23.0, and a Zep Cloud API key. Get your API key from app.getzep.com.
Set up your environment variables:
Upgrading from @getzep/zep-mastra 0.1.x
One breaking change affects existing code: in 0.1.x the model’s zepSearch schema contained only query; 0.2.0 also exposes scope, reranker, limit, mmrLambda, and centerNodeUuid. Callers using the legacy scope/reranker/limit constructor arguments keep the fully-pinned behavior with no code changes; tools constructed without them expose those parameters to the model. To pin explicitly, use pinnedParams — see pin-or-expose search parameters.
See the CHANGELOG for the full 0.2.0 migration notes.
Automatic memory for trusted deployments
createZepProcessors inserts retrieved context into a system message. Use this processor pair only when all stored content is fully trusted and application-authored:
Customizing context injection
By default the input processor retrieves the context block with thread.getUserContext and wraps it in DEFAULT_CONTEXT_TEMPLATE — the canonical <ZEP_CONTEXT> wrapper shared by Zep’s framework integrations. Three options change that, in increasing order of control:
contextBuilderreplaces the default retrieval with your own async function. It receives aZepContextBuilderInput— the client, the resolveduserId/threadId, and the latest user message — and returns the context string (orundefinedto inject nothing for that turn). The result still passes through the template orformatContext.contextTemplatecustomizes the wrapping text. It must contain a literal{context}placeholder, replaced via literal string replacement (not a format string), so braces,%, and$in the retrieved context are safe.formatContexttakes over formatting entirely and wins overcontextTemplate.
Per-call identity
Pass resolveIdentity (a ZepIdentityResolver, sync or async) to resolve userId/threadId per call from Mastra’s requestContext instead of binding a fixed identity at construction time — useful when a single processor instance serves many end users:
The same resolveIdentity option is accepted by createZepSearchTool, createZepRememberTool, and createZepContextTool (resolved from each tool call’s context.requestContext), and createZepToolset forwards it to all three tools.
If both a fixed userId/threadId and resolveIdentity are set, resolveIdentity’s result wins for whichever fields it returns; any field it omits or resolves to undefined falls back to the constructor-bound value.
Provisioning with ensureZepUserAndThread
Zep requires the user and thread to exist before messages are added. Call ensureZepUserAndThread once, out-of-band, before the first turn. It creates then catches the conflict, so calling it repeatedly for the same user and thread is safe. Already-exists detection is typed — a 409 status, or a 400 with “already exists” — so genuine failures (auth, network, 5xx) are never mistaken for a conflict; they are logged at warn and reported via a false return, never thrown.
Pass onUserCreated (a ZepUserCreatedHook) to run one-time setup — per-user ontology, custom instructions, seeding — exactly once, only when the user is genuinely newly created:
Tools
The toolset puts the model in the loop: the agent calls a tool when it decides to persist or recall. Use it standalone or alongside the processors.
The toolset provides three tools:
Each tool is also exported as a standalone factory (createZepRememberTool, createZepSearchTool, createZepContextTool) for wiring a single tool with custom options.
Each tool has a typed input and output schema:
zepSearch returns facts as extracted strings tailored to the search scope — edge facts, "name: summary" for entities, episode content, and so on — with found set to true when the result is non-empty.
Pin-or-expose search parameters
createZepSearchTool exposes each graph.search parameter to the model by default, alongside the always-required query, so the model can tune its own searches per call:
Each parameter is independently tri-state at construction time (ZepSearchPinnableParams):
pinnedParamsfixes a parameter to a constant value: hidden from the model’s schema, always sent.hiddenParamsremoves a parameter from the schema without pinning it: omitted from thegraph.searchcall entirely, so Zep’s own server default applies.- Omitted from both — exposed to the model with the documented default.
searchFilters and bfsOriginNodeUuids are always constructor-only — never exposed to the model — and applied whenever set. The legacy scope/reranker/limit constructor arguments pin (and hide) their parameter, equivalent to the corresponding pinnedParams entry.
Binding: user graph vs standalone graph
Tools and processors are bound to a graph via userId/graphId (tools take these on a ZepBinding; the processors take userId/threadId directly):
userIdtargets a user graph — the home for personalized agent memory. Use it for a conversational agent that remembers an end user. Context retrieval and thezepContexttool also need athreadId(the thread scopes relevance; retrieval still spans the whole user graph).graphIdtargets a standalone graph — shared or domain knowledge such as a product knowledge base or runbooks. No user node, no user summary. Standalone graphs are supported by the tools; the processors are thread-oriented and expect auserId.
If both are set, userId wins. If neither is set (or threadId can’t be resolved), tools and processors degrade gracefully instead of throwing.
Roles
zepRemember accepts an arbitrary role string and maps it onto Zep’s closed RoleType enum: user, assistant, system, tool, function, or norole. Host-framework role names like human or ai are coerced safely; unknown roles fall back to norole. The mapper is exported as toRoleType.
Best practices
- Use tools for untrusted context. Use processors only when all stored content is application-authored and trusted.
- Call
ensureZepUserAndThreadonce before the first turn, then reuse a singleZepClient - Pass real names so Zep can anchor the user’s identity node in the graph
- Don’t read-after-write within a turn — Zep builds the graph asynchronously, so a just-stored fact is not instantly retrievable
- Pass a custom
loggerto route Zep warnings into your logging stack
Next steps
- Explore customizing graph structure for advanced knowledge organization
- Learn about searching the graph and how to tune search
- See code examples for additional patterns