io.github.theluckystrike/zip-archive-create-extract-bomb-guard · v0.22.6 · ecommerce
io.github.theluckystrike/zip-archive-create-extract-bomb-guard is healthy: it completed an MCP handshake in 829 ms and exposes 12 tools.
Create, inspect and extract zip archives offline, with traversal, symlink and zip-bomb guards.
Endpoint: https://mcp.zovo.one/mcp/zip (streamable-http)
Repository · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 12 |
| Latency | 829 ms |
| Last checked (UTC) | 2026-10-16T17:00:49.524Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-16T17:00:49.524Z | Healthy | 829 | |
| 2026-10-15T11:05:09.506Z | Healthy | 1053 |
license_status | Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a free-tier refusal. No arguments, nothing changes. |
license_activate | Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong or expired key changes nothing. license_status confirms it. |
zip_upload | Send a file to this hosted endpoint. There is no filesystem here, so instead of a path you upload the file once with zip_upload and then pass its name wherever a path is asked for: an archive to zip_list, zip_extract, zip_extract_text or zip_add, a plain file to zip_create. Give exactly one of conte |
zip_files | List the files stored for your token on this endpoint, with their sizes. These are the names every path argument here resolves against. |
zip_delete_upload | Delete one uploaded file stored for your token. The register rows zip_history lists are kept. |
zip_create | Call this tool to pack files uploaded with zip_upload into a new .zip and get a download link valid for one hour. Entry names are always relative, so the archive cannot write outside where it is unpacked. |
zip_list | Call this tool to list an archive's entries with sizes and ratios and flag what is dangerous: absolute paths, .., symlinks, encrypted entries, duplicate names and bombs. Read-only. Run it before zip_extract. |
zip_extract | Call this tool to unpack an archive; every entry comes back as its own download link valid for one hour. Traversal, absolute-path and symlink entries are refused, a size and ratio cap stops a zip bomb, and dry_run reports exactly what would be written. |
zip_add | Call this tool to add files to an existing archive under their own names, or under prefix. A name clash is refused unless replace. An archive holding unsafe entries is refused rather than rewritten. |
zip_extract_text | Call this tool to read one text entry out of an archive without unpacking anything: give the entry name and the text comes back inline. Binary entries are refused by name rather than printed as noise. |
zip_bundle_month | Local (stdio) install only. On this hosted endpoint /mcp/invoice, /mcp/quotes, /mcp/expense-tracker, /mcp/docx and /mcp/resume return their documents as one-hour download links and keep no output folder to read, so there is nothing for this tool to bundle. Pack the files with zip_upload plus zip_cre |
zip_history | List the archives created for your token, newest first, with entry counts, sizes and names, plus how much of the free 20 a month is used. Each download link expires after an hour; the row keeps the name. |