org. filetourl/ mcp
by filetourl.org · remote · no sign-in to list tools · v1.0.0 · published by org.filetourl
Upload a file and get a public shareable URL via API or MCP.
7 tools: 1 do something that can't be undone, 5 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone1Claude Code: ask: see these tools
- Changes things5Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http filetourl https://filetourl.org/api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Can't be undone 1Claude Code: ask
upload_chunkSend one chunk of a file started with start_upload.No findings
Why it is in this group
- The name "upload_chunk" says "upload": a word for a change.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Send one chunk of a file started with start_upload. Call repeatedly with increasing chunk_index (starting at 0) until the whole file is sent, then call finish_upload.
Changes things 5Claude Code: ask
confirm_uploadOptional.No findings
Why it is in this group
- The name "confirm_upload" says "upload": a word for a change.
Description, as the server wrote it Optional. Confirm that the PUT to a create_upload_url upload_url finished, and get the final size and link back. The link also activates without this call, this just verifies it.
create_upload_urlPreferred way to host a file.No findings
Why it is in this group
- The name "create_upload_url" says "create": a word for a change.
Description, as the server wrote it Preferred way to host a file. Reserves a link and returns a short-lived upload_url on filetourl.org itself, safe for AI agent sandboxes that only allow egress to trusted domains, since the upload never has to leave filetourl.org. Send the raw file bytes yourself with a single HTTP PUT to that URL (do not read the file into this conversation, and do not base64-encode it). The public_url returned works as soon as the PUT succeeds. Needs a FileToUrl Developer API key.
finish_uploadComplete a chunked upload after all chunks have been sent via upload_chunk.No findings
Why it is in this group
- The name "finish_upload" says "upload": a word for a change.
Description, as the server wrote it Complete a chunked upload after all chunks have been sent via upload_chunk. Assembles the file, uploads it, and returns the shareable URL.
start_uploadBegin a chunked upload for larger files.No findings
Why it is in this group
- The name "start_upload" says "start": a word for a change.
Description, as the server wrote it Begin a chunked upload for larger files. Returns an upload_id and recommended chunk size. Use this instead of upload_file for files over ~2MB.
upload_fileHost a small file by sending its bytes inline as base64.No findings
Why it is in this group
- The name "upload_file" says "upload": a word for a change.
Description, as the server wrote it Host a small file by sending its bytes inline as base64. Prefer create_upload_url instead: inline base64 is slow and costly above roughly 100KB. For a user's own files only. Needs a FileToUrl Developer API key.
Only reads 1Claude Code: allow
get_file_statusLook up whether a link created earlier is still active.No findings
Why it is in this group
- The name "get_file_status" says "get": a word for reading.
Description, as the server wrote it Look up whether a link created earlier is still active. Reports 'pending' for a reserved upload whose bytes have not arrived yet, and 'expired' once its upload window has passed.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http filetourl https://filetourl.org/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__filetourl__get_file_status"
],
"ask": [
"mcp__filetourl__create_upload_url",
"mcp__filetourl__confirm_upload",
"mcp__filetourl__upload_file",
"mcp__filetourl__start_upload",
"mcp__filetourl__upload_chunk",
"mcp__filetourl__finish_upload"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as filetourl. Review it before you use it.