Is io.github.dropthis-dev/dropthis-mcp safe to use?

io.github.dropthis-dev/dropthis-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.dropthis-dev/dropthis-mcp?

io.github.dropthis-dev/dropthis-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.dropthis-dev/dropthis-mcp?

io.github.dropthis-dev/dropthis-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.dropthis-dev/dropthis-mcp actively maintained?

io.github.dropthis-dev/dropthis-mcp is actively maintained — last commit was 4 days ago.

io.github.dropthis-dev/dropthis-mcp

@dropthis/mcp

Publish content (HTML, files, or a URL) and get back a permanent public URL, from any MCP agent.

GitHub npm

No known CVEs

No license

Actively maintained

Last commit 4d ago

Works with most clients

Transport: stdio, http

0 tools

Grade F

Edit this pageView history

Writing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dropthis": {
      "env": {
        "DROPTHIS_API_KEY": "sk_..."
      },
      "args": [
        "-y",
        "@dropthis/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-dropthis-dev-dropthis-mcp)](https://mcppedia.org/s/io-github-dropthis-dev-dropthis-mcp)

Read me

What io.github.dropthis-dev/dropthis-mcp does

Official MCP server for dropthis — publish content (HTML, files, or a URL to fetch) and get back a permanent public URL, from any MCP-compatible agent (Claude Code, Claude Desktop, Cursor, Windsurf, opencode, ChatGPT, n8n, …).

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@dropthis/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

56/100across 5 weighted dimensions

How we score →

0255075100

−44

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @dropthis/mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.dropthis-dev/dropthis-mcp safe to use?: io.github.dropthis-dev/dropthis-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.dropthis-dev/dropthis-mcp?: io.github.dropthis-dev/dropthis-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.dropthis-dev/dropthis-mcp?: io.github.dropthis-dev/dropthis-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.dropthis-dev/dropthis-mcp actively maintained?: io.github.dropthis-dev/dropthis-mcp is actively maintained — last commit was 4 days ago.

Similar servers

Others in writing

View all →

Md2wechat Skill92

Markdown to WeChat CLI | 一键排版发布到微信公众号：支持 40+ 排版样式和专业主题、AI 配图、批量发布

3.0k 14

Sub Agents Mcp91

Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.

89 1

Clarifyprompt MCP Server90

AI prompt optimization for 58+ platforms across 7 categories with custom platforms

11 1

io.github.Octen-Team/octen-mcp90

URL to LLM-ready markdown — plus per-page category, page_structure, and query-driven highlights.

11 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.dropthis-dev/dropthis-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Writing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dropthis": {
      "env": {
        "DROPTHIS_API_KEY": "sk_..."
      },
      "args": [
        "-y",
        "@dropthis/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-dropthis-dev-dropthis-mcp)](https://mcppedia.org/s/io-github-dropthis-dev-dropthis-mcp)

Read me

What io.github.dropthis-dev/dropthis-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@dropthis/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

@dropthis/mcp

Two ways to connect:

Local (stdio) — npx @dropthis/mcp, authenticated with your sk_ API key. Best for coding agents.
Remote (hosted) — https://mcp.dropthis.app/mcp over Streamable HTTP, with OAuth for chat clients or a static sk_ Bearer for automation. Best for ChatGPT / claude.ai / n8n.

Local / stdio

Add to your MCP client config:

{
  "mcpServers": {
    "dropthis": {
      "command": "npx",
      "args": ["-y", "@dropthis/mcp"],
      "env": { "DROPTHIS_API_KEY": "sk_..." }
    }
  }
}

Get an API key from your dropthis account. The server reads DROPTHIS_API_KEY (and optional DROPTHIS_BASE_URL). Set DROPTHIS_READ_ONLY=true to register only the read tools — a safe way to give an agent read access to your drops with no write/delete risk. Claude Desktop users can install the one-click .mcpb bundle instead (the API key is stored in your OS keychain).

See docs/setup.md for per-client instructions (Claude Code, Cursor, Windsurf, VS Code, …).

Remote (hosted) connector

Point an MCP-capable client at the hosted endpoint:

https://mcp.dropthis.app/mcp

One-click install (the deep-link opens the editor and adds the remote server):

Cursor: Add to Cursor
VS Code: Add to VS Code
Chat clients (ChatGPT, claude.ai) authenticate via OAuth 2.1 — add the connector URL and approve the login (a 6-digit email code; no password).
Automation (n8n, CI, custom agents) sends a static Authorization: Bearer sk_... header and skips OAuth. See docs/n8n.md.
Read-only: append ?readonly=true to the endpoint (https://mcp.dropthis.app/mcp?readonly=true) to register only the read tools, even for a write-capable credential.

Tools

Tool	Purpose
`dropthis_publish`	Publish new content (`content` \| `source_url` \| `files` \| `file`/`paths`) → permanent URL
`dropthis_update_content`	Publish a new content version to an existing drop, keeping its URL
`dropthis_update_settings`	Update a drop's settings (title, visibility, password, noindex, expiry, metadata) and routing (move onto a custom domain / back to the shared pool, rename the vanity slug)
`dropthis_get`	Fetch one drop's metadata
`dropthis_get_content`	Read back what a drop is serving — its file manifest, or one file's content (the read half of the edit loop)
`dropthis_resolve`	Turn a drop's public URL or slug into its `drop_…` id (owner-scoped) — the recovery path for the id-based tools
`dropthis_list`	List your drops (paginated)
`dropthis_list_deployments`	List a drop's deployment (version) history
`dropthis_delete`	Delete a drop (requires `confirm: true`)
`dropthis_account`	Authenticated account profile (id, email, status) including the account's limits for preflight sizing
`dropthis_domains_connect`	Connect a custom domain (`path` or `dedicated` mode) and get the CNAME record to create
`dropthis_domains_verify`	Re-check a domain's DNS/TLS and advance its status toward `live`
`dropthis_domains_get`	Read one domain's stored state and DNS instructions (no live DNS check)
`dropthis_domains_list`	List the account's custom domains and which is the default publish target
`dropthis_domains_update`	Repoint a ded

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

56/100across 5 weighted dimensions

How we score →

0255075100

−44

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @dropthis/mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.dropthis-dev/dropthis-mcp safe to use?: io.github.dropthis-dev/dropthis-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.dropthis-dev/dropthis-mcp?: io.github.dropthis-dev/dropthis-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.dropthis-dev/dropthis-mcp?: io.github.dropthis-dev/dropthis-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.dropthis-dev/dropthis-mcp actively maintained?: io.github.dropthis-dev/dropthis-mcp is actively maintained — last commit was 4 days ago.