{"name":"sh.uploads/mcp","slug":"uploads-mcp","title":"uploads.sh","description":"Host files from coding agents; stage on a branch and attach to GitHub PRs.","url":"https://mcp.market/server/uploads-mcp","rating":null,"grade":"A","score":92,"certified":false,"status":"active","category":"devtools","tags":["devtools"],"presence":{"score":49,"stars":19,"forks":2,"downloads_week":449,"last_push_at":"2026-09-17T19:20:16.000Z","license":"Apache-2.0"},"uptime":{"percent":100,"checks":1,"ok":1,"last_checked_at":"2026-09-19T20:01:38.454Z","last_ok_at":"2026-09-19T20:01:38.454Z","latency_ms":305},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/buildinternet/uploads","website":"https://uploads.sh","version":"0.54.0","remotes":[{"type":"streamable-http","url":"https://agents.uploads.sh/mcp","headers":[{"description":"Bearer workspace token (up_<workspace>_…) or OAuth access token. Omit this header to use the OAuth browser flow.","format":"string","isSecret":true,"name":"Authorization"}]}],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@buildinternet/uploads","version":"0.54.0","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}],"environmentVariables":[{"description":"Workspace bearer token (up_<workspace>_…). Mint with uploads login.","isRequired":true,"format":"string","isSecret":true,"name":"UPLOADS_TOKEN"},{"description":"Workspace name. Inferred from the token when omitted.","format":"string","name":"UPLOADS_WORKSPACE"},{"description":"API origin. Defaults to https://api.uploads.sh.","format":"string","default":"https://api.uploads.sh","name":"UPLOADS_API_URL"}]}],"tools":[],"scan":{"score":92,"grade":"A","scanned_at":"2026-09-19T19:54:15.802Z","report":{"scannerVersion":"0.1.5","scannedAt":"2026-09-19T19:54:15.821Z","components":{"code":{"score":20,"max":25,"notes":["159 source files scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 300ms (auth required)"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (endpoint requires auth); not counted"]},"auth":{"score":15,"max":15,"notes":["OAuth resource metadata advertised on 401"]},"maintenance":{"score":15,"max":15,"notes":["last push 2 days ago"]},"identity":{"score":8,"max":10,"notes":["namespace and repository owner differ","GitHub account older than a year","website matches verified namespace"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/screenshot-local.js: … Hide overlays first, then run any user eval (which may depend on, or // delib…"}],"inputs":{"probes":[{"url":"https://agents.uploads.sh/mcp","reachable":true,"authRequired":true,"latencyMs":300,"authScheme":"oauth"}],"packages":[{"registryType":"npm","identifier":"@buildinternet/uploads","version":"0.54.0","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":7,"publishedAt":"2026-09-14T19:30:31.630Z","repositoryUrl":"git+https://github.com/buildinternet/uploads.git","weeklyDownloads":449}],"repo":{"found":true,"owner":"buildinternet","repo":"uploads","archived":false,"pushedAt":"2026-09-17T19:20:16Z","stars":19,"forks":2,"openIssues":66,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/445666?v=4","ownerCreatedAt":"2010-10-19T16:27:44Z","license":"Apache-2.0"},"icon":{"url":"https://uploads.sh/apple-touch-icon.png","source":"registry","width":180,"height":180},"presence":{"stars":19,"forks":2,"downloadsWeek":449,"license":"Apache-2.0","lastPushAt":"2026-09-17T19:20:16.000Z","score":49}}}},"grade_history":[],"reviews":[]}