Mmcp.market

SRIFT MCP server

by srift.app·app.srift/srift·v3.0.0
No reviews yet

Secure P2P file transfer and encrypted chat for AI agents. No accounts, no API keys.

B73/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B73/100

full report

Adoption
Growing

1 stars113 downloads/wk

Reviews

Write one

Nobody has reviewed SRIFT yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SRIFT tools (8, 1 write)

write = sends, deletes, buys or posts
  • srift_approve_joinFree

    Host-only. Approve a pending guest join request by their temp user ID.

  • srift_close_sessionFree

    Close the active session. Flushes E2EE keys, disconnects signaling, clears chat history.

  • srift_join_sessionFree

    Request to join an existing SRIFT session by its 7-character session ID. The host must approve before transfers/chat work.

  • srift_kick_userFree

    Host-only. Disconnect and ban a peer from the active room.

  • srift_list_transfersFree

    List all active and recent transfers with progress, speed, ETA, and status.

  • srift_reject_joinFree

    Host-only. Reject a pending guest join request.

  • srift_session_statusFree

    Get current session details: id, role (host/guest), connection state, pending join requests, peer count.

  • srift_start_sessionwrite actionFree

    Create a new SRIFT secure session. Returns the 7-character session ID and a shareable URL. The host approves all future joins. E2EE keys derive locally from the session ID + optional roomSecret.

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

2 high
  • Code scan3 source files scanned13/25
  • Live reliabilityremote reachable in 1923ms20/20
  • Tool poisoning8 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace7/10

Findings (2)

  • highWrite-action tools reachable without authenticationauth.open-write
  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …er')}` ].join(";"); execSync(`powershell -NoProfile -Command "${psCmd}"`, { stdio: "ignore" }); …
Overall 73/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreC → Bscore 70: Write-action tools reachable without authentication; Shell command built from a string (injection risk)

Install directly

claude mcp add --transport http srift https://srift.app/mcp
Add to Cursor

SRIFT: common questions

Is SRIFT MCP server safe?
Mostly: it is graded B (73/100). Read the SRIFT safety report
How do I install SRIFT?
It runs remotely at srift.app. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does SRIFT need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is SRIFT maintained?
The last commit was 9 days ago (2026-09-11). The latest release is v3.0.0.
Is SRIFT up?
100% of our last 6 checks got an answer. We check remote servers about four times a day.

More from srift.app →