# mcp

YAFL's MCP server lets an agent hand a file from a laptop to a VPS in one tool call. Encryption happens on your side, links expire after 24 hours.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: yafldev
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/yafldev/mcp
- Updated: 2026-08-01
- HTML: https://affpapa.org/en/nevibecode/mcp/yafldev-mcp

## What it does

YAFL ships as an MCP server plus a CLI client. The agent calls `upload_file`, the bytes get encrypted locally, and only ciphertext reaches the service. Pulling a file back works through `download_file` with the share URL. Alongside those two there is `get_status` for checking whether a link is still alive and how long it has left, `list_files` for your own transfers, and `delete_file` to revoke a link early.

The decryption key sits in the URL's `#fragment`, which browsers never send to a server, so the service has nothing to decrypt with. A link password adds a second derived layer, and a one-time link dies after the first successful download. Should an agent's key be stolen, the thief sees only metadata for that key's transfers — the file contents stay unreadable. Keys are named and revoked one at a time, so one key per machine is the sensible setup.

It runs through `npx` and needs Node.js 18+. No API key is required up front: the first tool call comes back with a guided error pointing at `yafl login`, an RFC 8628 device flow where the agent shows a code and you approve it in a browser. The free tier caps a single file at 100 MB.

## Requirements
- Needs: Node.js (commands run via npx)
- Environment variables: `YAFL_API_KEY` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add mcp -e YAFL_API_KEY=<YAFL_API_KEY> -- npx -y @yafldev/mcp
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add yafldev-mcp --env YAFL_API_KEY=<YAFL_API_KEY> -- npx -y @yafldev/mcp
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "yafldev-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@yafldev/mcp"
            ],
            "env": {
                "YAFL_API_KEY": "<YAFL_API_KEY>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "yafldev-mcp": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@yafldev/mcp"
            ],
            "env": {
                "YAFL_API_KEY": "<YAFL_API_KEY>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e YAFL_API_KEY=<YAFL_API_KEY> yafldev-mcp npx -y @yafldev/mcp
```
Replace <…> with your own values

## When to use it
- push a file from a laptop to a remote VPS without a manual web upload
- hand a share link to a person without leaving the agent session
- check whether a link has expired without downloading the file
- revoke a transfer before its expiry
- pass a file between agents running on different machines

## Example prompts
- Upload `build/report.pdf` and give me the link
- Download the file from this link into `~/downloads`
- Check whether the link I sent this morning is still alive

## Similar
- [vnsh](https://affpapa.org/en/nevibecode/mcp/vnsh.md) — MCP server · ★ 158
- [aispace](https://affpapa.org/en/nevibecode/mcp/aispace.md) — MCP server · ★ 13
- [vault-ask](https://affpapa.org/en/nevibecode/mcp/vault-ask.md) — MCP server
- [hush](https://affpapa.org/en/nevibecode/mcp/omarei-omoto-hush.md) — MCP server · ★ 6
- [securing-s3-buckets](https://affpapa.org/en/nevibecode/skills/securing-s3-buckets.md) — skill · 6900 installs
- [sops-encryption](https://affpapa.org/en/nevibecode/skills/sops-encryption.md) — skill · 403 installs

## Other versions with the same name
- [mcp · kubeshark](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — ★ 12110
- [mcp · butterbase-ai](https://affpapa.org/en/nevibecode/mcp/butterbase-ai-mcp.md) — ★ 3031
- [mcp · medplum](https://affpapa.org/en/nevibecode/mcp/mcp.md) — ★ 2766
- [mcp · sceneview](https://affpapa.org/en/nevibecode/mcp/sceneview-mcp.md) — ★ 1349
- [mcp · buoy-gg](https://affpapa.org/en/nevibecode/mcp/buoy-gg-mcp.md) — ★ 691

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md