zipnative MCP — ZIP creation, inspection, secure extraction & verification
io.github.Nizoka/zipnative-mcp · v1.1.0
ZIP MCP server: create, inspect, verify, extract, canonicalize, merge, modify. 15 tools
Connect Runs on your machine
claude mcp add zipnative-mcp -e ZIPNATIVE_MCP_OUTPUT_DIR=<ZIPNATIVE_MCP_OUTPUT_DIR> -e ZIPNATIVE_MCP_CACHE_DIR=<ZIPNATIVE_MCP_CACHE_DIR> -e ZIPNATIVE_MCP_PORT=<ZIPNATIVE_MCP_PORT> -e ZIPNATIVE_MCP_HTTP_TOKEN=<ZIPNATIVE_MCP_HTTP_TOKEN> -e ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES=<ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES> -e ZIPNATIVE_MCP_MAX_ENTRIES=<ZIPNATIVE_MCP_MAX_ENTRIES> -e ZIPNATIVE_MCP_WORKERS=<ZIPNATIVE_MCP_WORKERS> -e ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES=<ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES> -- npx -y [email protected]
{
"mcpServers": {
"zipnative-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ZIPNATIVE_MCP_OUTPUT_DIR": "<ZIPNATIVE_MCP_OUTPUT_DIR>",
"ZIPNATIVE_MCP_CACHE_DIR": "<ZIPNATIVE_MCP_CACHE_DIR>",
"ZIPNATIVE_MCP_PORT": "<ZIPNATIVE_MCP_PORT>",
"ZIPNATIVE_MCP_HTTP_TOKEN": "<ZIPNATIVE_MCP_HTTP_TOKEN>",
"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES": "<ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES>",
"ZIPNATIVE_MCP_MAX_ENTRIES": "<ZIPNATIVE_MCP_MAX_ENTRIES>",
"ZIPNATIVE_MCP_WORKERS": "<ZIPNATIVE_MCP_WORKERS>",
"ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES": "<ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES>"
}
}
}
}
{
"mcpServers": {
"zipnative-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ZIPNATIVE_MCP_OUTPUT_DIR": "<ZIPNATIVE_MCP_OUTPUT_DIR>",
"ZIPNATIVE_MCP_CACHE_DIR": "<ZIPNATIVE_MCP_CACHE_DIR>",
"ZIPNATIVE_MCP_PORT": "<ZIPNATIVE_MCP_PORT>",
"ZIPNATIVE_MCP_HTTP_TOKEN": "<ZIPNATIVE_MCP_HTTP_TOKEN>",
"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES": "<ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES>",
"ZIPNATIVE_MCP_MAX_ENTRIES": "<ZIPNATIVE_MCP_MAX_ENTRIES>",
"ZIPNATIVE_MCP_WORKERS": "<ZIPNATIVE_MCP_WORKERS>",
"ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES": "<ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES>"
}
}
}
}
{
"servers": {
"zipnative-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ZIPNATIVE_MCP_OUTPUT_DIR": "<ZIPNATIVE_MCP_OUTPUT_DIR>",
"ZIPNATIVE_MCP_CACHE_DIR": "<ZIPNATIVE_MCP_CACHE_DIR>",
"ZIPNATIVE_MCP_PORT": "<ZIPNATIVE_MCP_PORT>",
"ZIPNATIVE_MCP_HTTP_TOKEN": "<ZIPNATIVE_MCP_HTTP_TOKEN>",
"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES": "<ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES>",
"ZIPNATIVE_MCP_MAX_ENTRIES": "<ZIPNATIVE_MCP_MAX_ENTRIES>",
"ZIPNATIVE_MCP_WORKERS": "<ZIPNATIVE_MCP_WORKERS>",
"ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES": "<ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
ZIPNATIVE_MCP_OUTPUT_DIROptional | Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLA… |
ZIPNATIVE_MCP_CACHE_DIROptional | Opt-in content-addressed response cache directory (absolute path) (SHA-256 keyed, 1h TTL, 256 MiB, oldest-written evicted first, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue. |
ZIPNATIVE_MCP_PORTOptional | Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set. |
ZIPNATIVE_MCP_HTTP_TOKENOptional, secret | Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged. |
ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTESOptional | Operator ceiling for limits.maxEntryUncompressedSize, limits.maxTotalUncompressedSize and limits.maxEntryCompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMI… |
ZIPNATIVE_MCP_MAX_ENTRIESOptional | Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start. |
ZIPNATIVE_MCP_WORKERSOptional | Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses t… |
ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTESOptional | Operator ceiling for every file written in outputMode='file' (create_zip, modify_zip, canonicalize_zip, merge_zip, extract_zip, inflate_raw), enforced while streaming (default 4294967296 = 4 GiB, the 1.0.0 behaviour). Integer >= 1048576, read once at startup; an invalid value refuses to start. Rais… |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 19 Oct 2026 |
| Last updated | 19 Oct 2026 |
| Registry name | io.github.Nizoka/zipnative-mcp |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
