qURL MCP server
Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents.
4 stars22 downloads/wk
Reviews
Write oneNobody has reviewed qURL yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
qURL tools (16, 8 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
batch_create_qurlswrite actionCreate up to 100 qURLs in a single request. The single-call alternative to looping `create_qurl` — saves round trips and returns a single envelope of per-item results.
create_qurlwrite actionCreate a qURL — a policy-bound, expiring access link that gates a target URL with optional IP/geo/UA/AI-agent filters and time or session limits.
delete_qurlwrite actionPermanently revoke a qURL — the link and every access token under it stop working immediately.
extend_qurlPush out the expiration of an active qURL by a relative duration.
get_qurlFetch a single qURL resource by ID and return its current state plus a bounded preview of access tokens.
list_qurl_sessionsList active access sessions for a qURL resource.
list_qurlsList qURL resources, paginated and optionally filtered by status, date range, or search text.
mint_linkMint a fresh access link for an existing qURL resource — same one-shot display semantics as `create_qurl.qurl_link`.
resolve_qurlRedeem a qURL access token (the `at_` prefix you pulled out of a `qurl_link`) to reveal the underlying URL and obtain a time-bound, IP-bound network access grant.
revoke_qurl_tokenRevoke one qURL token under a resource without revoking the whole resource.
terminate_qurl_sessionsTerminate active access sessions for a qURL resource.
update_qurlwrite actionUpdate a qURL's expiration, tags, description, custom domain, or proxy host-header behavior. The richer alternative to `extend_qurl` — use `update_qurl` whenever you need anything beyond a relative time push.
update_qurl_tokenwrite actionUpdate one qURL token under a resource: expiration, label, access policy, max sessions, or session duration.
upload_file_data_qurlwrite actionUpload base64-encoded PDF or raster image content to a qURL connector, then mint an access link for it.
upload_file_qurlwrite actionUpload a local PDF or raster image file to a qURL connector, then mint an access link for it.
upload_text_qurlwrite actionRender text content into a temporary PDF, upload that PDF to a qURL connector, then mint an access link for it.
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
- Code scan95 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Install directly
Runs npx -y @layervai/qurl-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add qurl-mcp -- npx -y @layervai/qurl-mcp
qURL: common questions
- Is qURL MCP server safe?
- Mostly: it is graded B (82/100). Read the qURL safety report
- How do I install qURL?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does qURL need an API key?
- Yes. The registry entry asks for
QURL_API_KEY,QURL_SMTP_USERNAME,QURL_SMTP_PASSWORD. - Is qURL maintained?
- The last commit was in the last day (2026-09-19). The latest release is v0.5.0.