Is io.github.kuyazee/artifacts safe to use?

io.github.kuyazee/artifacts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install io.github.kuyazee/artifacts?

io.github.kuyazee/artifacts supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.kuyazee/artifacts?

io.github.kuyazee/artifacts is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.kuyazee/artifacts actively maintained?

io.github.kuyazee/artifacts is actively maintained — last commit was 10 days ago. It has 6 GitHub stars.

io.github.kuyazee/artifacts

Self-hosted artifact publishing: POST HTML/JSX/Markdown/zip, get an unguessable URL on your domain

6 26.1k/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 10d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 3h ago

Edit this pageView history

io.github.kuyazee/artifacts is an MCP server that self-hosted artifact publishing: POST HTML/JSX/Markdown/zip, get an unguessable URL on your domain. Its tool list has not been published yet over http, requires no API key, and scores 63/100 on MCPpedia's security, maintenance and efficiency rubric.

Writing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-kuyazee-artifacts": {
      "args": [
        "-y",
        "cp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kuyazee-artifacts)](https://mcppedia.org/s/io-github-kuyazee-artifacts)

Read me

What io.github.kuyazee/artifacts does

POST HTML, a React component, Markdown, or a zipped static site — get back an unguessable URL on your own domain.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'cp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

63/100across 5 weighted dimensions

How we score →

0255075100

−37

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked cp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kuyazee/artifacts safe to use?: io.github.kuyazee/artifacts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.kuyazee/artifacts?: io.github.kuyazee/artifacts supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.kuyazee/artifacts?: io.github.kuyazee/artifacts is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.kuyazee/artifacts actively maintained?: io.github.kuyazee/artifacts is actively maintained — last commit was 10 days ago. It has 6 GitHub stars.

Similar servers

Others in writing

View all →

Mcp Pandoc94

MCP server for document format conversion using pandoc.

576 1

Mcp Server Youtube Transcript92

This is an MCP server that allows you to directly download transcripts of YouTube videos.

583 1

io.github.xberg-io/crawlberg92

Scrape, crawl, and map websites to Markdown or JSON via local CLI.

160 5

io.github.damonwill78-a11y/clean-markdown90

Any URL to clean, LLM-ready Markdown for RAG. Strips ads, nav, and boilerplate.

MCP Security Weekly

Get CVE alerts and security updates for io.github.kuyazee/artifacts and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Writing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-kuyazee-artifacts": {
      "args": [
        "-y",
        "cp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kuyazee-artifacts)](https://mcppedia.org/s/io-github-kuyazee-artifacts)

Read me

What io.github.kuyazee/artifacts does

POST HTML, a React component, Markdown, or a zipped static site — get back an unguessable URL on your own domain.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'cp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

artifacts

Self-hosted, Claude-style artifact publishing

POST HTML, a React component, Markdown, or a zipped static site. Get back an unguessable URL on your own domain.

Quick start · Deploy · API · CLI · MCP · Security

Dashboard: publish, group by project, and manage

A published artifact served with the viewer topbar

About

AI assistants produce a lot of shareable output: dashboards, prototypes, reports, small apps. Claude's hosted artifacts work well, but the URLs live on someone else's infrastructure. This is the self-hosted version, about 1,100 lines. You POST content, it serves the rendered result at an unguessable URL on a domain you control.

It runs as one container with a single admin account and, by default, no database. Each artifact is a directory of plain files under /data, so backing up that directory backs up everything. On hosts that wipe local disk on restart, point it at durable external storage instead (an S3-compatible bucket, a git remote, or Postgres) by setting STORAGE_BACKEND. See deploying.

Features

Content types. HTML, JSX/TSX (a single React component, no build step), Markdown, and zipped static sites.
Agent-native, human-friendly. A built-in MCP server lets Claude Code, Codex, or any MCP client publish with one tool call. Humans get a drag-and-drop web UI at / (behind an admin login) and a CLI.
Two-tier auth. An admin logs into the dashboard with a password; CLI and MCP carry scoped, revocable API keys (read / publish / full) with optional expiry, so you never share one master secret.
Private by default, with per-artifact visibility. A new artifact is private, shared through a signed capability link (?k=…) you can rotate to revoke. Switch any artifact to public (anyone with the bare link) or password-protected. Nothing is discoverable by default: unguessable slugs, noindex everywhere. See visibility.
Optional viewer frame. A slim top toolbar (title, copy link, hide) like Claude, Gemini, and ChatGPT artifacts. Toggle it globally in Settings or per artifact; ?raw=1 serves the bare content. Redirects are never framed.
Markdown render settings. Pick the reading font, content width, base font size, and starting theme for every Markdown artifact in Settings. Markdown renders from its source on each view, so a change shows on existing artifacts too. Framed Markdown gets a navbar button that cycles Auto, Light, and Dark for that reader. See docs/formats.md.
Redirects. type: "redirect" turns a slug into a short link that answers an HTTP 301 at the server, where other hosts fall back to a JavaScript bounce. The target must be an absolute http(s) URL and cannot carry credentials, and the response is uncacheable, so repointing the slug takes effect on the next visit. Repoint one from the row men

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

63/100across 5 weighted dimensions

How we score →

0255075100

−37

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked cp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kuyazee/artifacts safe to use?: io.github.kuyazee/artifacts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.kuyazee/artifacts?: io.github.kuyazee/artifacts supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.kuyazee/artifacts?: io.github.kuyazee/artifacts is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.kuyazee/artifacts actively maintained?: io.github.kuyazee/artifacts is actively maintained — last commit was 10 days ago. It has 6 GitHub stars.