Is sh.uploads/mcp safe to use?

sh.uploads/mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install sh.uploads/mcp?

sh.uploads/mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can sh.uploads/mcp do?

sh.uploads/mcp provides 2 tools: Docs, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with sh.uploads/mcp?

sh.uploads/mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.

Is sh.uploads/mcp actively maintained?

sh.uploads/mcp is actively maintained - last commit was 0 days ago.

sh.uploads/mcp

@buildinternet/uploads

Host files from coding agents; stage on a branch and attach to GitHub PRs.

417/wk 2 tools GitHub npm

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: http, stdio

2 tools · ~58 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 4m ago

Edit this pageView history

sh.uploads/mcp is an MCP server that host files from coding agents; stage on a branch and attach to GitHub PRs. Its tool list has not been published yet over http and stdio, requires no API key, and scores 90/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp, stdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "sh-uploads-mcp": {
      "args": [
        "-y",
        "@buildinternet/uploads"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/sh-uploads-mcp)](https://mcppedia.org/s/sh-uploads-mcp)

Read me

What sh.uploads/mcp does

Host files from coding agents; stage on a branch and attach to GitHub PRs.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

90/100across 5 weighted dimensions

How we score →

0255075100

−10

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @buildinternet/uploads against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~58 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is sh.uploads/mcp safe to use?: sh.uploads/mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install sh.uploads/mcp?: sh.uploads/mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can sh.uploads/mcp do?: sh.uploads/mcp provides 2 tools: Docs, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with sh.uploads/mcp?: sh.uploads/mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.
Is sh.uploads/mcp actively maintained?: sh.uploads/mcp is actively maintained - last commit was 0 days ago.

Similar servers

Others in other

View all →

io.github.vshulcz/deja-vu95

deja-vu: local memory over the session histories of forty-three coding agents.

1.5k 6

MCP Wordpress Remote95

MCP WordPress Remote proxy server

188 10

Argo95

专门为 agent 打造的 agent 搜索工具，具备多语言搜索能力，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。

242 1

Football Docs94

Searchable football data provider documentation for AI coding agents. Like Context7 for football data.

226 8

MCP Security Weekly

Get CVE alerts and security updates for sh.uploads/mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp, stdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "sh-uploads-mcp": {
      "args": [
        "-y",
        "@buildinternet/uploads"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/sh-uploads-mcp)](https://mcppedia.org/s/sh-uploads-mcp)

Read me

What sh.uploads/mcp does

Host files from coding agents; stage on a branch and attach to GitHub PRs.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

uploads

The missing upload command for coding agents.

Capture screenshots, recordings, and other artifacts as you work: test reports, logs, JSON, PDFs, zips. When the pull request opens, uploads.sh puts them in one tidy comment that updates automatically on each revision. Hosted uploads.sh is free to start. Connect your own bucket — Cloudflare R2 or any S3-compatible provider — so storage in that bucket is unmetered, or self-host the open-source service.

uploads.sh · Docs · npm → · Quick start · What it looks like · Screenshots in CI · What's in this repo · Develop

_{Under active development. uploads.sh is being built in the open, so
APIs can still change. Feedback is welcome — open an issue.}

Artifacts ready when the pull request opens

uploads hosts the artifacts coding agents produce at stable public URLs they can use in pull requests and issues: screenshots and screen recordings, but also test reports, logs, JSON, CSV, Markdown, PDFs, and zip archives (the full list is under Plans & limits). On a branch, uploads put stages each file as soon as it is ready. When the pull request opens, uploads.sh promotes the staged files into one managed comment.

GitHub's own attachments work from a browser and, since GitHub CLI 2.99 (September 2026), from gh … --attach, but only once a pull request or issue exists, and the files stay behind GitHub's own hosting, where they cannot be embedded or fetched anywhere else. uploads.sh gives agents a stable public URL from the same terminal where they build and test the change, while the branch is still in progress; GitHub has no public API (yet) for that. The hosted MCP server does the same for agents that cannot run a command at all, taking files as bytes or a URL.

Keys are hash-free, so re-uploading the same filename overwrites in place and the URL never changes — every embed of it updates at once. Workspaces keep tenants (and their budgets and key policies) apart.

This repo is the source of the canonical deployment at uploads.sh: the API worker, auth worker, MCP server, the hosted read-gate Worker, the Astro web app, and the @buildinternet/uploads CLI (published to npm from [packages/uploads](packages/upload

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

90/100across 5 weighted dimensions

How we score →

0255075100

−10

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @buildinternet/uploads against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~58 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is sh.uploads/mcp safe to use?: sh.uploads/mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install sh.uploads/mcp?: sh.uploads/mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can sh.uploads/mcp do?: sh.uploads/mcp provides 2 tools: Docs, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with sh.uploads/mcp?: sh.uploads/mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.
Is sh.uploads/mcp actively maintained?: sh.uploads/mcp is actively maintained - last commit was 0 days ago.