Search / dev.filelayer/core
protogridL0· runs locallyUser files for a SaaS, under one person's authority: list, share with an expiry, revoke.
v0.33.0 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"core": {
"command": "npx",
"args": [
"-y",
"@filelayer/[email protected]",
"-p",
"@filelayer/core",
"filelayer-mcp"
],
"env": {
"DATABASE_URL": "${DATABASE_URL}",
"FILELAYER_AS": "${FILELAYER_AS}",
"FILELAYER_ORG": "${FILELAYER_ORG}",
"S3_REGION": "auto",
"S3_ACCESS_KEY_ID": "${S3_ACCESS_KEY_ID}",
"S3_SECRET_ACCESS_KEY": "${S3_SECRET_ACCESS_KEY}",
"FILELAYER_MCP_AGENT_LABEL": "filelayer-mcp",
"FILELAYER_MCP_ALLOW_DESTRUCTIVE": "false",
"FILELAYER_MCP_EXPOSE_AUDIT": "false",
"FILELAYER_MCP_RETURN_BYTES": "false"
}
}
}
}claude mcp add core -e "DATABASE_URL=${DATABASE_URL}" -e "FILELAYER_AS=${FILELAYER_AS}" -e "FILELAYER_ORG=${FILELAYER_ORG}" -e "S3_REGION=auto" -e "S3_ACCESS_KEY_ID=${S3_ACCESS_KEY_ID}" -e "S3_SECRET_ACCESS_KEY=${S3_SECRET_ACCESS_KEY}" -e "FILELAYER_MCP_AGENT_LABEL=filelayer-mcp" -e "FILELAYER_MCP_ALLOW_DESTRUCTIVE=false" -e "FILELAYER_MCP_EXPOSE_AUDIT=false" -e "FILELAYER_MCP_RETURN_BYTES=false" -- npx -y @filelayer/[email protected] -p @filelayer/core filelayer-mcp[mcp_servers.core]
command = "npx"
args = ["-y", "@filelayer/[email protected]", "-p", "@filelayer/core", "filelayer-mcp"]
env = { "DATABASE_URL" = "${DATABASE_URL}", "FILELAYER_AS" = "${FILELAYER_AS}", "FILELAYER_ORG" = "${FILELAYER_ORG}", "S3_REGION" = "auto", "S3_ACCESS_KEY_ID" = "${S3_ACCESS_KEY_ID}", "S3_SECRET_ACCESS_KEY" = "${S3_SECRET_ACCESS_KEY}", "FILELAYER_MCP_AGENT_LABEL" = "filelayer-mcp", "FILELAYER_MCP_ALLOW_DESTRUCTIVE" = "false", "FILELAYER_MCP_EXPOSE_AUDIT" = "false", "FILELAYER_MCP_RETURN_BYTES" = "false" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"core": {
"type": "local",
"command": [
"npx",
"-y",
"@filelayer/[email protected]",
"-p",
"@filelayer/core",
"filelayer-mcp"
],
"enabled": true,
"environment": {
"DATABASE_URL": "{env:DATABASE_URL}",
"FILELAYER_AS": "{env:FILELAYER_AS}",
"FILELAYER_ORG": "{env:FILELAYER_ORG}",
"S3_REGION": "auto",
"S3_ACCESS_KEY_ID": "{env:S3_ACCESS_KEY_ID}",
"S3_SECRET_ACCESS_KEY": "{env:S3_SECRET_ACCESS_KEY}",
"FILELAYER_MCP_AGENT_LABEL": "filelayer-mcp",
"FILELAYER_MCP_ALLOW_DESTRUCTIVE": "false",
"FILELAYER_MCP_EXPOSE_AUDIT": "false",
"FILELAYER_MCP_RETURN_BYTES": "false"
}
}
}
}{
"mcpServers": {
"core": {
"command": "npx",
"args": [
"-y",
"@filelayer/[email protected]",
"-p",
"@filelayer/core",
"filelayer-mcp"
],
"env": {
"DATABASE_URL": "${DATABASE_URL}",
"FILELAYER_AS": "${FILELAYER_AS}",
"FILELAYER_ORG": "${FILELAYER_ORG}",
"S3_REGION": "auto",
"S3_ACCESS_KEY_ID": "${S3_ACCESS_KEY_ID}",
"S3_SECRET_ACCESS_KEY": "${S3_SECRET_ACCESS_KEY}",
"FILELAYER_MCP_AGENT_LABEL": "filelayer-mcp",
"FILELAYER_MCP_ALLOW_DESTRUCTIVE": "false",
"FILELAYER_MCP_EXPOSE_AUDIT": "false",
"FILELAYER_MCP_RETURN_BYTES": "false"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=core&config=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%3D"
}{
"servers": {
"core": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@filelayer/[email protected]",
"-p",
"@filelayer/core",
"filelayer-mcp"
],
"env": {
"DATABASE_URL": "${DATABASE_URL}",
"FILELAYER_AS": "${FILELAYER_AS}",
"FILELAYER_ORG": "${FILELAYER_ORG}",
"S3_REGION": "auto",
"S3_ACCESS_KEY_ID": "${S3_ACCESS_KEY_ID}",
"S3_SECRET_ACCESS_KEY": "${S3_SECRET_ACCESS_KEY}",
"FILELAYER_MCP_AGENT_LABEL": "filelayer-mcp",
"FILELAYER_MCP_ALLOW_DESTRUCTIVE": "false",
"FILELAYER_MCP_EXPOSE_AUDIT": "false",
"FILELAYER_MCP_RETURN_BYTES": "false"
}
}
}
}{
"mcpServers": {
"core": {
"command": "npx",
"args": [
"-y",
"@filelayer/[email protected]",
"-p",
"@filelayer/core",
"filelayer-mcp"
],
"env": {
"DATABASE_URL": "${DATABASE_URL}",
"FILELAYER_AS": "${FILELAYER_AS}",
"FILELAYER_ORG": "${FILELAYER_ORG}",
"S3_REGION": "auto",
"S3_ACCESS_KEY_ID": "${S3_ACCESS_KEY_ID}",
"S3_SECRET_ACCESS_KEY": "${S3_SECRET_ACCESS_KEY}",
"FILELAYER_MCP_AGENT_LABEL": "filelayer-mcp",
"FILELAYER_MCP_ALLOW_DESTRUCTIVE": "false",
"FILELAYER_MCP_EXPOSE_AUDIT": "false",
"FILELAYER_MCP_RETURN_BYTES": "false"
}
}
}
}extensions:
"core":
enabled: true
name: "core"
type: stdio
cmd: "npx"
args:
- "-y"
- "@filelayer/[email protected]"
- "-p"
- "@filelayer/core"
- "filelayer-mcp"
envs:
"DATABASE_URL": "${DATABASE_URL}"
"FILELAYER_AS": "${FILELAYER_AS}"
"FILELAYER_ORG": "${FILELAYER_ORG}"
"S3_REGION": "auto"
"S3_ACCESS_KEY_ID": "${S3_ACCESS_KEY_ID}"
"S3_SECRET_ACCESS_KEY": "${S3_SECRET_ACCESS_KEY}"
"FILELAYER_MCP_AGENT_LABEL": "filelayer-mcp"
"FILELAYER_MCP_ALLOW_DESTRUCTIVE": "false"
"FILELAYER_MCP_EXPOSE_AUDIT": "false"
"FILELAYER_MCP_RETURN_BYTES": "false"
timeout: 300
Placeholders to fill from your own secret store: ${DATABASE_URL}, ${S3_ACCESS_KEY_ID}, ${S3_SECRET_ACCESS_KEY}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulnsno known advisory in 1 resolved packagesdeps.mcp_sdk_versionthe official MCP SDK is not in the dependency graphdeps.resolvable@filelayer/[email protected] resolved: 1 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +dns-namespace +website ~liveness-unmeasured +updated-3d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
@filelayer/[email protected] npm0 dependencies, resolved · advisories checked 2026-10-19
No known advisory affects this dependency graph.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
@filelayer/core | npm | 0.33.0 | npx | DATABASE_URL, S3_ACCESS_KEY_ID, S3_SECRET_ACCESS_KEY |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "dev.filelayer/core",
"title": "Filelayer",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.33.0",
"packages": [
{
"version": "0.33.0",
"transport": {
"type": "stdio"
},
"identifier": "@filelayer/core",
"runtimeHint": "npx",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"packageArguments": [
{
"type": "positional",
"value": "-p"
},
{
"type": "positional",
"value": "@filelayer/core"
},
{
"type": "positional",
"value": "filelayer-mcp"
}
],
"environmentVariables": [
{
"name": "DATABASE_URL",
"isSecret": true,
"isRequired": true,
"description": "Your own PostgreSQL, where this library keeps file ownership, grants and the audit chain. Apply node_modules/@filelayer/core/schema.sql once before starting."
},
{
"name": "FILELAYER_AS",
"isRequired": true,
"description": "The ONE subject this server speaks for, in your own id space. Fixed for the life of the process: no tool reads it as an argument and no tool can change it, which is the only reason exposing these tools to an agent is safe. Write it yourself or have your provisioning write it, never derive it from a conversation. Serving several people means starting several servers."
},
{
"name": "FILELAYER_ORG",
"isRequired": true,
"description": "The organisation this server is scoped to, in your own id space."
},
{
"name": "FILELAYER_DATA_DIR",
"description": "A local directory for the bytes. Needs no bucket and no IAM user. Set this OR the S3_* block: with neither, the server refuses to start rather than falling back to memory, which would work in a demo and lose the first real file."
},
{
"name": "S3_ENDPOINT",
"description": "An S3-compatible endpoint, for example https://<account>.r2.cloudflarestorage.com. Setting it makes S3_BUCKET, S3_ACCESS_KEY_ID and S3_SECRET_ACCESS_KEY required."
},
{
"name": "S3_BUCKET",
"description": "The bucket. It must be private: this library decides who may be GIVEN a URL and has no say in who the object store will answer. `npx -p @filelayer/core filelayer doctor` reports whether yours serves unauthenticated reads."
},
{
"name": "S3_REGION",
"default": "auto",
"description": "Region, or `auto` for Cloudflare R2."
},
{
"name": "S3_ACCESS_KEY_ID",
"isSecret": true,
"description": "Access key id for the bucket."
},
{
"name": "S3_SECRET_ACCESS_KEY",
"isSecret": true,
"description": "Secret access key for the bucket."
},
{
"name": "FILELAYER_MCP_AGENT_LABEL",
"default": "filelayer-mcp",
"description": "How this agent names itself in the audit trail, recorded on every event these tools produce. It is what lets the chain separate \"the partner opened this document\" from \"the partner's assistant opened this document\"."
},
{
"name": "FILELAYER_MCP_ALLOW_DESTRUCTIVE",
"choices": [
"true",
"false"
],
"default": "false",
"description": "Set to exactly `true` to register delete_file. Off by default because deleting is not recoverable and an agent that misreads a sentence deletes the wrong thing silently."
},
{
"name": "FILELAYER_MCP_EXPOSE_AUDIT",
"choices": [
"true",
"false"
],
"default": "false",
"description": "Set to exactly `true` to register file_audit. Off by default because the trail is an organisation's whole history and a tool that returns it copies every file name, actor and denial into the model's context. Reading it is itself audited since 0.27.0, which was the previous reason; the default did not move."
},
{
"name": "FILELAYER_MCP_RETURN_BYTES",
"choices": [
"true",
"false"
],
"default": "false",
"description": "Set to exactly `true` to register read_file. Off by default because a document returned by a tool is a document copied into a model's context; file_info plus a share link is usually what was actually needed."
},
{
"name": "FILELAYER_BASE_URL",
"description": "The base of the share URLs this instance mints. Without it, share links come back without a URL."
}
]
}
],
"repository": {
"url": "https://github.com/filelayer/filelayer",
"source": "github",
"subfolder": "packages/core"
},
"websiteUrl": "https://filelayer.dev",
"description": "User files for a SaaS, under one person's authority: list, share with an expiry, revoke."
}