[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_113":114},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":49,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":-5,"_81":-5,"_82":49,"_83":-5,"_84":59,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94},"apiUrl","https://odel.app/api","creator","dropthis-dev","moduleId","dropthis-mcp","@dropthis-dev/dropthis-mcp","displayName","dropthis","tagline","Publish HTML, files, or a URL to a permanent public URL, then update it — from any MCP agent.","iconKey","https://dropthis.app/icon-512.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.dropthis.app/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1781756430000,"updatedAt",1786596213000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.dropthis-dev%2Fdropthis-mcp","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",0,"upstreamUpdatedAt",1783781812000,"detectedTransport","streamable-http","detectedAuthType","oauth","probeStatus","ok","lastProbedAt","githubRepoUrl","https://github.com/dropthis-dev/dropthis-mcp","githubRepoFullName","dropthis-dev/dropthis-mcp","releaseId","ext-dropthis-dev-dropthis-mcp","version","0.37.0","descriptionMarkdown","

$\"dropthis\"$

\n\n# @dropthis/mcp\n\nOfficial [MCP](https://modelcontextprotocol.io) server for [dropthis](https://dropthis.app) — publish content (HTML, files, or a URL to fetch) and get back a permanent public URL, from any MCP-compatible agent (Claude Code, Claude Desktop, Cursor, Windsurf, opencode, ChatGPT, n8n, …).\n\nTwo ways to connect:\n\n- **Local (stdio)** — `npx @dropthis/mcp`, authenticated with your `sk_` API key. Best for coding agents.\n- **Remote (hosted)** — `https://mcp.dropthis.app/mcp` over Streamable HTTP, with OAuth for chat clients or a static `sk_` Bearer for automation. Best for ChatGPT / claude.ai / n8n.\n\n## Local / stdio\n\nAdd to your MCP client config:\n\n```json\n{\n \"mcpServers\": {\n \"dropthis\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@dropthis/mcp\"],\n \"env\": { \"DROPTHIS_API_KEY\": \"sk_...\" }\n }\n }\n}\n```\n\nGet an API key from your dropthis account. The server reads `DROPTHIS_API_KEY` (and optional `DROPTHIS_BASE_URL`). Set `DROPTHIS_READ_ONLY=true` to register only the read tools — a safe way to give an agent read access to your drops with no write/delete risk. Set `DROPTHIS_TOOLSETS` (e.g. `drops`) to trim the tool surface to what a session needs ([Toolsets](#toolsets-trim-the-tool-surface)). Claude Desktop users can install the one-click `.mcpb` bundle instead (the API key is stored in your OS keychain).\n\nSee [docs/setup.md](https://github.com/dropthis-dev/dropthis-mcp/blob/main/docs/setup.md) for per-client instructions (Claude Code, Cursor, Windsurf, VS Code, …).\n\n## Remote (hosted) connector\n\nPoint an MCP-capable client at the hosted endpoint:\n\n```\nhttps://mcp.dropthis.app/mcp\n```\n\nOne-click install (the deep-link opens the editor and adds the remote server):\n\n- **Cursor:** [Add to Cursor](cursor://anysphere.cursor-deeplink/mcp/install?name=dropthis&config=eyJ1cmwiOiJodHRwczovL21jcC5kcm9wdGhpcy5hcHAvbWNwIn0=)\n- **VS Code:** [Add to VS Code](vscode:mcp/install?%7B%22name%22%3A%22dropthis%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.dropthis.app%2Fmcp%22%7D)\n\n- **Chat clients (ChatGPT, claude.ai)** authenticate via OAuth 2.1 — add the connector URL, sign in with a 6-digit email code (no password), then approve the consent screen, which shows the requested permissions and lets you pick the workspace to publish into.\n- **Automation (n8n, CI, custom agents)** sends a static `Authorization: Bearer sk_...` header and skips OAuth. See [docs/n8n.md](https://github.com/dropthis-dev/dropthis-mcp/blob/main/docs/n8n.md).\n- **Read-only:** append `?readonly=true` to the endpoint (`https://mcp.dropthis.app/mcp?readonly=true`) to register only the read tools, even for a write-capable credential.\n- Manage or disconnect the connector later from the console's Connected apps page at https://app.dropthis.app.\n\n## Tools\n\n| Tool | Purpose |\n|------|---------|\n| `dropthis_publish` | Publish new content (`content` \\| `source_url` \\| `files` \\| `file`/`paths`) → permanent URL |\n| `dropthis_update_content` | Publish a new content version to an existing drop, keeping its URL |\n| `dropthis_update_settings` | Update a drop's settings (title, visibility, password, noindex, expiry, metadata) and routing (move onto a custom domain / back to the shared pool, rename the vanity slug) |\n| `dropthis_get` | Fetch one drop's metadata |\n| `dropthis_get_content` | Read back what a drop is serving — its file manifest, or one file's content (the read half of the edit loop) |\n| `dropthis_resolve` | Turn a drop's public URL or slug into its `drop_…` id (owner-scoped) — the recovery path for the id-based tools |\n| `dropthis_list` | List your drops (paginated) |\n| `dropthis_list_deployments` | List a drop's deployment (version) history |\n| `dropthis_restore_deployment` | Roll a drop back to a prior deployment's content (Pro+ version history) — mints a new deployment copying it and makes it current, URL unchanged |\n| `dropthis_analytics` | Read a drop's approximate view analytics (Keep+ for counts, Pro+ for country/referer/daily breakdowns) |\n| `dropthis_delete` | Delete a drop (requires `confirm: true`) |\n| `dropthis_account` | Authenticated account profile (id, email, status) including the account's limits for preflight sizing |\n| `dropthis_domains_connect` | Connect a custom domain (`path` or `dedicated` mode) and get the CNAME record to create |\n| `dropthis_domains_verify` | Re-check a domain's DNS/TLS and advance its status toward `live` |\n| `dropthis_domains_get` | Read one domain's stored state and DNS instructions (no live DNS check) |\n| `dropthis_domains_list` | List the account's custom domains and which is the default publish target |\n| `dropthis_domains_update` | Repoint a dedicated domain to another drop, or set/clear the default path domain |\n| `dropthis_domains_delete` | Disconnect a custom domain (requires `confirm: true`) |\n| `dropthis_workspaces` | List the workspaces this connection can publish to, and which is active |\n| `dropthis_use_workspace` | Switch the active workspace for this connection (persists server-side) |\n| `dropthis_create_workspace` | Create a new team workspace (you become its owner) |\n| `dropthis_rename_workspace` | Rename a team workspace or change its slug |\n| `dropthis_delete_workspace` | Delete a team workspace (owner only; requires `confirm: true`) |\n| `dropthis_members` | List a team workspace's members and their roles |\n| `dropthis_invite_member` | Invite an email to a team workspace as admin or member |\n| `dropthis_update_member_role` | Change a member's role (owner/admin/member) |\n| `dropthis_remove_member` | Remove a member from a workspace, or leave it (requires `confirm: true`) |\n| `dropthis_invitations` | List your own pending workspace invitations |\n| `dropthis_accept_invitation` | Accept a workspace invitation and join (by token or invitation id) — the teammate join path |\n\n`file`/`paths` are local/stdio only — the hosted Worker omits them from the tool schemas entirely. `dropthis_update_content` accepts the same content inputs as `dropthis_publish`; a `source_url` is fetched server-side (SSRF-guarded) and stored as the new version. The id-based tools (`dropthis_update_content`, `dropthis_update_settings`, `dropthis_get`, `dropthis_get_content`, `dropthis_analytics`, `dropthis_delete`, `dropthis_list_deployments`, `dropthis_restore_deployment`) require the full `drop_…` id from the publish response and are **strict id-only**: pass a URL or slug and the tool returns an error pointing you at `dropthis_resolve`, which turns a public URL/slug back into the `drop_…` id (owner-scoped). Resolve once, then edit by id — persist the `drop_…` id, since URLs and slugs are locators that can drift. Connections whose OAuth grant lacks the `drops:write` scope see only the read tools.\n\n`dropthis_account` returns your account's exact limits.\n\nThe team-management tools (`dropthis_create_workspace`, `dropthis_rename_workspace`, `dropthis_delete_workspace`, `dropthis_members`, `dropthis_invite_member`, `dropthis_update_member_role`, `dropthis_remove_member`, `dropthis_invitations`, `dropthis_accept_invitation`) need a team-scoped credential (ADR-0068) — a publish-only key cannot manage teams. Find a workspace id with `dropthis_workspaces` and a member's `accountId` with `dropthis_members`. `dropthis_accept_invitation` is the teammate's join path: list your invites with `dropthis_invitations`, then accept by its invitation id (or by the raw token from the invite email).\n\n### Workspaces (teams)\n\nEvery drop lands in a **workspace** (ADR-0067). A fresh login homes to your personal workspace; teams are shared workspaces with members and roles. Each connection has one **active workspace**, and publishes go there by default:\n\n- `dropthis_workspaces` lists the workspaces this connection can act in and flags the active one.\n- `dropthis_use_workspace` switches the active workspace; the choice **persists server-side** across reconnects.\n- `dropthis_publish` takes a per-call `workspace` override — write-side targeting for a new drop.\n- `dropthis_list` takes a per-call `workspace` selector — list another workspace you belong to without switching.\n- id-addressed ops (`update_content`, `update_settings`, `delete`, …) always act in the drop's own workspace (a drop never moves workspace).\n- `dropthis_account` echoes the active workspace (name, kind, your role).\n\nA static `sk_` API key is **pinned** to the one workspace it was minted in — `dropthis_use_workspace` and the per-call `workspace` override/selector do not apply to it. To act in another workspace with an `sk_` key, mint a key in that workspace. OAuth (remote) connections are not pinned and can switch freely.\n\n### Permissions & read-only\n\nWrite tools (publish, update, delete, domain and team management) require write access; the read tools never do:\n\n- A static `Authorization: Bearer sk_...` key is **always write-capable** (account-scoped).\n- An **OAuth** (remote connector) grant must hold the `drops:write` scope to see the write tools. The read tools need no scope, so a grant without `drops:write` — or any session in read-only mode — sees the read tools alone. A `403 insufficient_scope` from a write tool means re-authenticate to request `drops:write`.\n\nThere are two ways to force a **read-only** session even with a write-capable credential — only the read tools are registered, so there is zero write/delete risk:\n\n- **Local / stdio:** set the env var `DROPTHIS_READ_ONLY=true`.\n- **Remote:** append `?readonly=true` to the endpoint (`https://mcp.dropthis.app/mcp?readonly=true`).\n\nThe read tools that stay available in a read-only session are: `dropthis_get`, `dropthis_list`, `dropthis_list_deployments`, `dropthis_get_content`, `dropthis_analytics`, `dropthis_resolve`, `dropthis_account`, `dropthis_domains_list`, `dropthis_domains_get`, `dropthis_workspaces`, `dropthis_members`, and `dropthis_invitations`. Everything else is a write tool and is hidden (`dropthis_restore_deployment`, a version-history rollback, needs the `drops:write` scope).\n\n### Toolsets (trim the tool surface)\n\nAll 29 tools load by default, but a publish-and-edit session rarely needs the 17 domains/workspaces/members/invitations tools. Register a subset to cut the per-session tool prose:\n\n- **Local / stdio:** set `DROPTHIS_TOOLSETS` to a comma list, e.g. `DROPTHIS_TOOLSETS=drops`.\n- **Remote:** append `?toolsets=` to the endpoint (beside `?readonly=`), e.g. `https://mcp.dropthis.app/mcp?toolsets=drops` or `?toolsets=drops,account`.\n\nValues: `drops` (the core publish/edit/read tools — 11), `domains` (6), `workspaces` (workspaces + members + invitations — 11), and `account` (1). Unset, empty, or all-unrecognized → all toolsets (the default). Unknown tokens are ignored. `?readonly=` and `?toolsets=` compose: each hides tools independently, so `?toolsets=drops&readonly=true` leaves only the drop read tools. The tool list is fixed at connect — restart the stdio server (or reconnect the remote connector) after changing the value. A hosted claude.ai connector has no query-param UI, so set it in the connector URL you add.\n\n### Multi-file bundles (`files` input)\n\nA `files` bundle holds up to 200 files. Each file has a `path` (bundle-relative, used verbatim in HTML/CSS `src`/`href` attributes) and exactly one content source:\n\n| Field | Use for | Notes |\n|-------|---------|-------|\n| `content` | UTF-8 text: HTML, CSS, JS, JSON, SVG, markdown | Text is sent inline |\n| `source_url` | Remote assets: images, video, PDFs, fonts | Server fetches the URL; no bytes pass through your agent. Optional `content_type`, `size_bytes`, `checksum_sha256`, `transform` |\n| `content_base64` | Small inline binary blobs only | Capped at 64 KiB encoded; rejected with a corrective error above that threshold pointing at `source_url` |\n\nNever base64-encode an image that is already publicly reachable — use `source_url` instead. Example bundle with mixed sources:\n\n```json\n{\n \"files\": [\n { \"path\": \"index.html\", \"content\": \"…

…\" },\n { \"path\": \"hero.jpg\", \"source_url\": \"https://cdn.example.com/hero.jpg\" },\n { \"path\": \"logo.png\", \"source_url\": \"https://cdn.example.com/logo.png\", \"content_type\": \"image/png\" }\n ]\n}\n```\n\n**Image transforms.** A `source_url` image can carry a `transform` so the server resizes/re-encodes it on ingest — point at a big original and store a small web-optimised derivative, no scratch bucket needed. Fits inside the box, never upscales, strips metadata. Only with `source_url`; omit `size_bytes`/`checksum_sha256` (the stored object reflects the output).\n\n```json\n{\n \"files\": [\n { \"path\": \"hero.jpg\", \"source_url\": \"https://cdn.example.com/original.png\", \"transform\": { \"width\": 1080, \"quality\": 78, \"format\": \"jpeg\" } }\n ]\n}\n```\n\n### Editing a bundle — `update_content` is a partial update\n\n`dropthis_update_content` **patches by default** (`mode: \"patch\"`). The files you send are upserted by path; every file you don't mention is **carried forward unchanged**. So to fix one page, send only that page — a previously-bundled image stays put:\n\n```json\n{\n \"drop_id\": \"drop_…\",\n \"files\": [{ \"path\": \"index.html\", \"content\": \"…edited…\" }]\n}\n```\n\nTo remove a file, list its path in `delete_paths`:\n\n```json\n{\n \"drop_id\": \"drop_…\",\n \"files\": [{ \"path\": \"index.html\", \"content\": \"…\" }],\n \"delete_paths\": [\"assets/old-hero.jpg\"]\n}\n```\n\nTo swap the **entire** content set in one call, use `mode: \"replace\"` — the files you send become the whole drop and everything else is dropped (`delete_paths` is invalid in replace mode).\n\n## Example prompts\n\nNatural-language asks that exercise the main tools (the agent picks the tool):\n\n- **Publish** — \"Publish this HTML report and give me the link.\" → `dropthis_publish` returns a permanent `url` and the `drop_…` id.\n- **Self-contained bundle** — \"Publish this landing page with its four images\" (HTML + `files[]` where each image is a `source_url`). → one drop, images fetched server-side and stored, no hot-linking.\n- **Edit in place** — \"Change the headline on that drop.\" → `dropthis_get_content` reads the current file, you edit it, `dropthis_update_content` ships a new version at the same URL.\n- **Recover the id** — \"Update https://abc123.dropthis.app/.\" → `dropthis_resolve` turns the URL into its `drop_…` id, then `dropthis_update_content`.\n- **Custom domain** — \"Serve my drops at reports.example.com.\" → `dropthis_domains_connect` (path mode) returns the CNAME, then `dropthis_domains_verify` until live.\n\n## Privacy\n\ndropthis is a hosted service: content you publish is sent to and stored by dropthis and served at a public URL. See the privacy policy at https://dropthis.app/privacy and the terms at https://dropthis.app/terms.\n\n## Support\n\n- Issues and feature requests: https://github.com/dropthis-dev/dropthis-mcp/issues\n- Email: support@dropthis.app\n\n## Known limitations\n\n- **Plan caps** apply per drop and per account (size, TTL, custom domains, passwords) across the Free / Keep / Pro / Business tiers — call `dropthis_account` to read the active limits before a large publish.\n- **Binary bytes can't ride in a tool call**: inline `content_base64` is capped at 64 KiB. For images/video/PDFs/fonts use `source_url` (the server fetches a public URL), or, on the local stdio server only, `file`/`paths`.\n- **`source_url` must be publicly reachable** over http(s); the server fetches it (SSRF-guarded). A private/localhost URL won't resolve.\n- **id-only edits**: the URL slug is not an id — keep the `drop_…` id from publish (or recover it with `dropthis_resolve`).\n- **Setting a password is Pro-only**; clearing one (`null`) is always allowed.\n\n## Develop\n\n```bash\nnpm install\nnpm run dev # tsx src/bin.ts (needs DROPTHIS_API_KEY)\nnpm run dev:worker # wrangler dev (remote Worker)\nnpm test # vitest (node) + vitest-pool-workers\nnpm run typecheck # tsc (node + worker tsconfigs)\nnpm run lint # biome\nnpm run build # tsup → dist/bin.cjs (the npm package)\nnpm run build:worker # wrangler deploy --dry-run (bundle check)\n```\n\nOne TypeScript codebase, two outputs: the stdio npm package and the Cloudflare Worker. Both are thin clients over the dropthis REST API (`@dropthis/node` for stdio, `@dropthis/node/edge` for the Worker); tool handlers are unit-tested against an injected fake client.\n\n## License\n\nMIT\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays","upstream",{"_97":98,"_99":-5,"_100":101,"_102":103,"_104":105,"_106":107},"requiredSecrets",[],"tags",[],"assets",[],"stats",{"_95":59,"_96":59},"ratingAvg","reviewCount","topics",[],"license","language","TypeScript","registryName","io.github.dropthis-dev/dropthis-mcp","homepage","https://dropthis.app","packages",[108],{"_109":110,"_111":112,"_75":76},"registryType","npm","identifier","@dropthis/mcp","ENV",{"_115":116,"_117":118,"_119":120},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]