Tools That Don't Upload

MCP server and REST API for data, text, code, PDF and web tasks. Requests are processed in memory and not stored.

• MCP endpoint (Streamable HTTP): https://toolsthatdontupload.com/mcp (v1.5.0)
• MCP tools: search_tools, run_tool, list_categories (they search and run the REST catalog)
• REST API: https://toolsthatdontupload.com/openapi.json (every endpoint, generated; every documented example is tested)
• Network tools (fetch URL, DNS, WHOIS, SSL) need an X-API-Key header. Free key: https://toolsthatdontupload.com/api-keys/

Korean tools

Romanization, amounts in Korean words (일금 ...원정), particles (조사), initial consonants (초성), business-number checksum, personal-data masking. Document generation: 견적서 / 거래명세서 (XLSX), 차용증 / 표준근로계약서 (DOCX).

Egress receipts

Every REST response has an X-Egress header and every MCP result has _meta["com.toolsthatdontupload/egress"] listing external hosts contacted (none for most tools).

Files through MCP

PDF tools accept file_base64 / files_base64 (max 10 MB) and return file_base64.

Quick start

Claude Code:

claude mcp add --transport http tools-that-dont-upload https://toolsthatdontupload.com/mcp

Cursor / other clients:

{"mcpServers":{"tools-that-dont-upload":{"url":"https://toolsthatdontupload.com/mcp"}}}

Limits

• Anonymous: compute tools under fair use; file 20 calls/day; AI 10 calls/day per IP.
• Free key: 1,000 credits/month. Paid plans: coming soon.

Privacy

Yellow = edge memory only. Orange = our edge fetches the URL you give. Blue = Cloudflare Workers AI. Details: https://toolsthatdontupload.com/privacy/

Note: this repository is a documentation snapshot, not the full deployed source.

Listed in the Claude Market MCP directory

MIT License

Repository layout

• workers/ — source of the production Cloudflare Workers that this repo deploys: tools-mcp-server (the MCP server at /mcp), tools-hub-ratelimit (gateway for network, file and AI tools), tools-hub-keys, tools-hub-kr (Korean tools), tools-hub-docs (Korean documents). Every folder in workers/ is deployed by GitHub Actions (.github/workflows/deploy.yml → scripts/deploy.mjs) with build provenance attestations; the live commit is shown at https://toolsthatdontupload.com/mcp and https://toolsthatdontupload.com/transparency/.
• tests/ — black-box regression tests that run against a deployed MCP endpoint (node tests/search-regression.mjs [MCP_URL]).
• plugin/ — Claude plugin (hosted connector + offline local server + 2 skills).
• local/ — offline MCP bundle source (.mcpb, release local-v1.0.0).
• server.json — MCP Registry metadata.
• SECURITY.md — how outbound requests are restricted, known limits, and how to report issues.

Development notes

• The MCP server code that actually runs is workers/tools-mcp-server/worker.mjs. The old root mcp-server.js was an outdated copy and was removed on 2026-10-12 (still in git history).
• Not everything is in this repo: the static site, the ~25 compute-tool Workers and the network-tool Workers are deployed separately. The MCP server reaches them through Cloudflare service bindings.
• Pushing to workers/, scripts/deploy.mjs or the workflow file deploys to production. Test changes on a separate workers.dev script first.