feat: add MCPB manifest, privacy policy, tool titles for Claude Connectors (#290)

- Add manifest.json for Desktop Extension (.mcpb) submission
- Add Privacy Policy section to README.md
- Add title annotations to all 44 MCP tools (required by review criteria)
- All tools now have title + readOnlyHint/destructiveHint annotations

Author: tcconnally

README.md

@@ -403,6 +403,31 @@ on-premises, classified environments).
 Perseus Computing LLC is a US-owned small business. SAM.gov registration in progress.
 NAICS: 541715, 541511, 541512.
 
+## Privacy Policy
+
+Mimir is a **local-first MCP server** — it runs entirely on your machine.
+
+### Data Collection
+- **No data collection.** Mimir does not collect, transmit, or phone home any user data, usage statistics, or telemetry.
+- All data remains in your local SQLite database file.
+
+### Data Usage & Storage
+- All memory entities, journal entries, and state are stored locally in a SQLite database at the path you specify via `--db`.
+- Optional **AES-256-GCM encryption at rest** is available — when enabled, entity bodies are encrypted before storage.
+- No data is shared with Perseus Computing LLC or any third party.
+
+### Third-Party Sharing
+- **None.** Mimir is fully air-gapped by default. No API calls, no cloud services, no external network requests.
+- The optional dense vector embeddings feature uses a locally-compiled model — no external embedding API is called.
+
+### Data Retention
+- You control retention: entities can be soft-deleted (`mimir_forget`), archived (via decay/compact), or permanently purged (`mimir_purge`).
+- No automatic off-machine backup is performed.
+
+### Contact
+- **Email:** privacy@perseus.observer
+- **GitHub:** [Perseus-Computing-LLC/mimir](https://github.com/Perseus-Computing-LLC/mimir)
+
 ## License
 
 MIT — see [LICENSE](./LICENSE).

manifest.json

@@ -0,0 +1,33 @@
+{
+  "manifest_version": "0.3",
+  "name": "mimir",
+  "version": "2.7.0",
+  "display_name": "Mimir — Persistent Memory for Claude",
+  "description": "Persistent cross-session memory for Claude. 44 MCP tools: remember, recall, search, link entities, journal audit trail, state management, AES-256-GCM encryption. Local-first, single Rust binary, zero cloud dependencies.",
+  "long_description": "Mimir gives Claude durable memory across sessions. It is a single Rust binary (~8MB) with an embedded SQLite database — no Docker, no Postgres, no cloud. Features include:\n\n- **44 MCP tools** for entity storage, hybrid search (FTS5 + dense vector), knowledge-graph traversal, journal audit trail, and state management\n- **AES-256-GCM encryption at rest** (optional, transparent)\n- **Fully local** — never phones home, no telemetry, air-gapped by default\n- **Agent-first design** — entity lifecycle with Ebbinghaus decay, auto-promotion, archiving\n- **Works with any MCP host** — Claude Desktop, Claude Code, Cursor, Hermes Agent, Perseus, and more\n\nInstall in one line: `curl -sSf https://raw.githubusercontent.com/Perseus-Computing-LLC/mimir/main/scripts/install.sh | sh`",
+  "author": {
+    "name": "Perseus Computing LLC",
+    "email": "privacy@perseus.observer",
+    "url": "https://perseus.observer"
+  },
+  "repository": "https://github.com/Perseus-Computing-LLC/mimir",
+  "homepage": "https://perseus.observer/mimir/",
+  "documentation": "https://github.com/Perseus-Computing-LLC/mimir#readme",
+  "license": "MIT",
+  "keywords": ["memory", "persistent-memory", "mcp", "local-first", "encryption", "sqlite", "fts5", "hybrid-search", "agent-memory"],
+  "privacy_policies": [
+    "https://github.com/Perseus-Computing-LLC/mimir#privacy-policy"
+  ],
+  "server": {
+    "type": "binary",
+    "entry_point": "mimir",
+    "mcp_config": {
+      "command": "mimir",
+      "args": ["serve", "--db", "~/.mimir/data/mimir.db"]
+    }
+  },
+  "compatibility": {
+    "claude_desktop": ">=1.0.0",
+    "platforms": ["darwin", "win32", "linux"]
+  }
+}