Metadata - xysq documentation

Say you’re building a support bot. Every conversation you save carries a bit of metadata (who it was about, which order):

client.vaults.push(vault_id,
    "user: my order is late\nagent: refunded, arrives in 3 days",
    metadata={"session_id": "chat-1", "email": "sara@shop.com"})

client.vaults.push(vault_id,
    "user: I can't log in\nagent: reset link sent",
    metadata={"session_id": "chat-2", "email": "tom@shop.com"})

client.vaults.push(vault_id,
    "user: what's our refund policy?\nagent: 30 days, no questions asked",
    metadata={"session_id": "chat-3"})   # no email: a general note

(session_id is special: it groups pushes into one source. It’s not a filterable key; the ones you declare are.) Now Sara messages again. You want her history, not Tom’s. Two steps.

Step 1: declare the key (once)

client.vaults.declare_meta_key(vault_id, "email")

This tells xysq that the email field matters and should be indexed. Everything already in the vault is backfilled in the background (the call returns straight away with backfill: "queued", and the work scales with the vault), and every future push indexes on arrival. Where keys can live: the registry is an agent/team-vault feature. Agent vaults declare via the SDK (above) or the vault’s Settings; team vaults via Settings → Filterable metadata in the app. The personal vault has no registry, so metadata still rides on personal pushes (like session_id), it just isn’t filterable there. Declare exact-value keys you’ll filter by: email, customer_id, ticket, order_id, repo. Don’t declare topical labels (topic: infra); grouping by theme is what tags are for. Up to 16 keys per vault, and a key is lowercase letters, digits, _ or -, up to 40 characters. Values must be text, numbers, or booleans (or arrays of them), and reserved keys like session_id are refused with a 409.

Step 2: filter your search

hits = client.vaults.pull(vault_id, "order problems",
                          filters={"meta": {"email": "sara@shop.com"}})

saved chat	in the search?	why
chat-1 (Sara’s order)	✅ yes	email matches
chat-2 (Tom’s login)	❌ no	different email, so it is filtered out
chat-3 (refund policy)	✅ yes	has no email, so it stays in scope

Call this rule match-or-absent: a source without the key is never excluded. The policy note isn’t about Sara, but it isn’t about anyone else either, so it stays available when answering her. Only data that contradicts the filter is dropped. (Case doesn’t matter; lists work on both sides, up to 16 values per key; multiple keys combine.)

Adding metadata later

Metadata usually rides in at push time, but you can attach or fix it on an existing source too:

res = client.vaults.push(vault_id, "user: escalation call notes...")  # forgot the email
client.vaults.update_source_meta(vault_id, res.id,
                                 set={"email": "sara@shop.com"})

Only declared keys are writable this way (unknown keys are echoed back, not written), and the filter index updates immediately. This is also the path for file uploads, which carry no metadata at upload time.

Filtering examples

One person’s context (their data + everything unlabeled, never anyone else’s):

client.vaults.pull(vault_id, "order problems",
                   filters={"meta": {"email": "sara@shop.com"}})

Two keys at once (both must not be contradicted):

client.vaults.pull(vault_id, "escalations",
                   filters={"meta": {"email": "sara@shop.com", "ticket": "T-88"}})

Either of two values for one key:

client.vaults.pull(vault_id, "billing",
                   filters={"meta": {"email": ["sara@shop.com", "sam@shop.com"]}})

Tags or metadata keys?

One question decides it: should a source that says nothing about this still show up? Yes → metadata key (forgiving, match-or-absent). No, only my curated set → tag (hard scope).

	Tags	Metadata keys
What	labels you curate	values the data carries
Set when	any time, any source	at push, or later via `update_source_meta`
Who sees it	scope members (personal/agent-global: just you; team/project: the whole scope)	the whole vault
Filtering by it	only tagged sources	drops contradictions; keyless stays in
Good for	working sets, review queues, compliance labels	`email`, `customer_id`, `order_id`, `repo`

Scoped pull_context

MCP agents get the same filter on pull_context, for team scopes, since that’s where MCP-reachable declared keys live (teams declare them in the team’s Settings; the personal vault has no registry). scope here is the team’s vault id, never its name. Team names are rejected outright, because two teams can share one; get the id from userinfo, which lists every team you can reach with its vault_id.

pull_context(query="order problems",
             scope="0f9a1c7e-3b52-4d18-9a44-2e6b8c05d731",  # a team vault id
             filters={"meta": {"email": "sara@shop.com"}})

Worth knowing on either surface:

Single vault. Filters apply to one vault per call (a named team on MCP, the addressed vault on the SDK); shared context isn’t searched while a metadata filter is active, and the coverage_note says so.
Typos fail loud. Filtering on an undeclared key is a 400 on the SDK (listing the declared keys); on MCP it’s items: [] with the reason in coverage_note, so read it before concluding “no memory”.
Combines with tags: filters={"tags": ["launch"], "meta": {"email": ...}} = your curated set, minus anyone else’s data.

Best practices

Canonicalize values before pushing. Matching is exact (trimmed, case-insensitive), so ORD-123 never matches 123.
Stamp the key consistently if exclusion matters: keyless sources always stay in scope, which is a feature for shared notes and a foot-gun for data you forgot to label. update_source_meta fixes stragglers.
Put metadata on the first push of a session. Later pushes in the same session_id extend the content, not the metadata.
Use arrays for multi-party sources. "email": ["a@…", "b@…"] matches either.
Deleting a key is a light switch, not a shredder. Removing a declared key only drops the index; the metadata stays on every source, and re-declaring rebuilds it identically.
Need only-matching results, keyless excluded too? That’s not a metadata filter; that’s a curated set. Use a tag.
Storing names or emails in the content itself, not just metadata? See PII scrubbing to strip that at ingest.

​Step 1: declare the key (once)

​Step 2: filter your search

​Adding metadata later

​Filtering examples

​Tags or metadata keys?

​Scoped pull_context

​Best practices