AgentDrive
by agentdrive.sh · remote · no sign-in to list tools · v1.0.0 · published by sh.agentdrive
Cross-agent artifact workspace with provenance across Claude Code, Codex, Cursor, LangGraph.
Deletes · 1Final · 1Changes · 10
22 tools: 1 can delete or cancel things, 1 do something that can't be undone, 10 change things and 10 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things10Claude Code: ask: see these tools
- Only reads10Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http agentdrive https://mcp.agentdrive.sh/mcp --header 'Authorization: <your-authorization>'Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
22 tools
Deletes or cancels 1Claude Code: deny
drive_deleteDelete a file from a workspace.No findings
Why it is in this group
- The name "drive_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete a file from a workspace.
Can't be undone 1Claude Code: ask
drive_inviteInvite a human to your organization by email.No findings
Why it is in this group
- The name "drive_invite" says "invite": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Invite a human to your organization by email. They will receive a verification code to join.
Changes things 10Claude Code: ask
drive_commentAdd a comment to a file.No findings
Why it is in this group
- The name "drive_comment" says "comment": a word for a change.
Description, as the server wrote it Add a comment to a file.
drive_contextAuto-pull the most relevant artifacts from prior agent sessions for the task you are about to do.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Auto-pull the most relevant artifacts from prior agent sessions for the task you are about to do. Combines semantic relevance with recency. Call this at the START of any non-trivial task to ground the agent in prior context — replaces manual copy-paste of artifacts between sessions.
drive_recallRecall persistent facts and preferences your agents have written.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Recall persistent facts and preferences your agents have written. In v1 this returns semantic search results across artifacts; v1.5 will narrow to auto-extracted facts (preferences, decisions, key entities).
drive_resumeLoad a compact handoff brief (goal, files touched, recent turns) from a prior session, by default the latest one from a different harness, so you can continue that work.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Load a compact handoff brief (goal, files touched, recent turns) from a prior session, by default the latest one from a different harness, so you can continue that work.
drive_rolesManage per-workspace role delegation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage per-workspace role delegation. Assign, list, or remove access for specific emails (view/comment/edit).
drive_sandbox_clone[EXPERIMENTAL] Clone a git repo into a per-workspace Linux sandbox.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it [EXPERIMENTAL] Clone a git repo into a per-workspace Linux sandbox. Requires Cloudflare Containers on the AgentDrive worker; gracefully degrades to a 503 with "sandbox not configured" otherwise.
drive_sandbox_commit[EXPERIMENTAL] Stage + commit the current sandbox worktree.No findings
Why it is in this group
- The name "drive_sandbox_commit" says "commit": a word for a change.
Description, as the server wrote it [EXPERIMENTAL] Stage + commit the current sandbox worktree. Surfaces as an AgentDrive artifact at commits/<sha>.json. Requires Cloudflare Containers; degrades to 503 otherwise.
drive_sandbox_exec[EXPERIMENTAL] Run a shell command inside the per-workspace Linux sandbox.No findings
Why it is in this group
- The name "drive_sandbox_exec" says "exec": a word for a change.
- The input takes a statement or command to run (input.cmd), which can change anything it can reach.
Description, as the server wrote it [EXPERIMENTAL] Run a shell command inside the per-workspace Linux sandbox. Captures stdout/stderr (64 KB cap), exit code, duration. Requires Cloudflare Containers; degrades to 503 otherwise.
drive_writeWrite a markdown file to a workspace.No findings
Why it is in this group
- The name "drive_write" says "write": a word for a change.
Description, as the server wrote it Write a markdown file to a workspace. Creates or updates the file with automatic versioning.
Only reads 10Claude Code: allow
drive_activityGet recent activity in a workspace (file writes, comments, shares).No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get recent activity in a workspace (file writes, comments, shares).
drive_feedbackRead human comments on a file.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read human comments on a file. Use this to check if humans have left feedback.
drive_listList files in a workspace, optionally filtered by path prefix.No findings
Why it is in this group
- The name "drive_list" says "list": a word for reading.
Description, as the server wrote it List files in a workspace, optionally filtered by path prefix.
drive_log_runLog an agent run to AgentDrive's provenance store.No findings
Why it is in this group
- The name "drive_log_run" says "log": a word for reading.
Description, as the server wrote it Log an agent run to AgentDrive's provenance store. Captures task, status, referenced/produced artifacts, and cross-platform identity (which agent on which tool). Used for retrospective context retrieval and team-wide audit.
drive_orgView your organization details: agents, members, plan, and usage.No findings
Why it is in this group
- The description's first verb is "view": a word for reading.
Description, as the server wrote it View your organization details: agents, members, plan, and usage.
drive_readRead a file's content from a workspace.No findings
Why it is in this group
- The name "drive_read" says "read": a word for reading.
Description, as the server wrote it Read a file's content from a workspace.
drive_sandbox_read[EXPERIMENTAL] Read a file from the per-workspace sandbox filesystem (build artifacts, test output, logs).No findings
Why it is in this group
- The name "drive_sandbox_read" says "read": a word for reading.
Description, as the server wrote it [EXPERIMENTAL] Read a file from the per-workspace sandbox filesystem (build artifacts, test output, logs). Requires Cloudflare Containers; degrades to 503 otherwise.
drive_searchSemantic search across your org's artifacts in AgentDrive.No findings
Why it is in this group
- The name "drive_search" says "search": a word for reading.
Description, as the server wrote it Semantic search across your org's artifacts in AgentDrive. Returns the top-N most relevant files. Use this BEFORE writing similar artifacts to avoid duplication and surface prior context.
drive_sessionsList recent agent sessions for this project across harnesses (Claude Code, Codex, OpenCode, Gemini CLI, Cursor), newest first.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List recent agent sessions for this project across harnesses (Claude Code, Codex, OpenCode, Gemini CLI, Cursor), newest first. Use to find prior work to continue.
drive_versionsView version history for a file in a workspace.No findings
Why it is in this group
- The description's first verb is "view": a word for reading.
Description, as the server wrote it View version history for a file in a workspace.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http agentdrive https://mcp.agentdrive.sh/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__agentdrive__drive_read",
"mcp__agentdrive__drive_list",
"mcp__agentdrive__drive_feedback",
"mcp__agentdrive__drive_activity",
"mcp__agentdrive__drive_org",
"mcp__agentdrive__drive_versions",
"mcp__agentdrive__drive_search",
"mcp__agentdrive__drive_log_run",
"mcp__agentdrive__drive_sessions",
"mcp__agentdrive__drive_sandbox_read"
],
"ask": [
"mcp__agentdrive__drive_write",
"mcp__agentdrive__drive_share",
"mcp__agentdrive__drive_comment",
"mcp__agentdrive__drive_invite",
"mcp__agentdrive__drive_roles",
"mcp__agentdrive__drive_recall",
"mcp__agentdrive__drive_context",
"mcp__agentdrive__drive_resume",
"mcp__agentdrive__drive_sandbox_clone",
"mcp__agentdrive__drive_sandbox_exec",
"mcp__agentdrive__drive_sandbox_commit"
],
"deny": [
"mcp__agentdrive__drive_delete"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agentdrive. Review it before you use it.