# ShareCut QR & Short Links

> Short links you can re-point after printing the QR, with click analytics. Free QR, no key.

- name: io.github.LucaRSdeCo/sharecut-mcp
- version: 1.1.0
- connection class: R0 (autonomous)
- trust: 90/100
- quality: 83/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.LucaRSdeCo%2Fsharecut-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.LucaRSdeCo%2Fsharecut-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "sharecut-mcp": {
      "type": "http",
      "url": "https://sharecut.site/mcp",
      "headers": {
        "Authorization": "Bearer ${SHARECUT_MCP_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${SHARECUT_MCP_TOKEN}`.

## Trust

- hygiene: 100
- liveness: 98
- freshness: 85
- provenance: 80
- drivers: +repository +namespace-matches-repo +reachable +uptime-96% ~updated-50d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 83/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: shorten_urls_bulk (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_links (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_link (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 2,062 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 2 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: 100 (weight 15)

- pass `deps.known_vulns`: no known advisory in 1 resolved packages
- n/a `deps.mcp_sdk_version`: the official MCP SDK is not in the dependency graph
- pass `deps.resolvable`: sharecut-mcp@1.1.0 resolved: 1 packages

- tools: 12, about 2,062 tokens to load them all
- tool set hash: a8dd2d3fa33857930e5de69a1582883b
- tools last changed: 2026-10-15T13:44:17.339Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.LucaRSdeCo/sharecut-mcp.svg)](https://protogrid.dev/servers/io.github.LucaRSdeCo/sharecut-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-15 `update_link` changed (description)
  - before: Re-point an existing short link at a new destination, or change its title, description or UTM parameters. This is what makes a printed QR code reusable: the code encodes the short link, so changing the destination redirects every copy already printed, shared or stuck on a wall, and the click history is kept. The new destination is screened with Google Safe Browsing. The short code itself never changes here, because changing it would break every copy already out there. Requires a ShareCut API key (Business plan).
  - after: Re-point an existing short link at a new destination, or change its title, description or UTM parameters. This is what makes a printed QR code reusable: the code encodes the short link, so changing the destination redirects every copy already printed, shared or stuck on a wall, and the click history is kept. The new destination is screened with Google Web Risk. The short code itself never changes here, because changing it would break every copy already out there. Requires a ShareCut API key (Business plan).
- 2026-10-15 `shorten_url` changed (description)
  - before: Create a ShareCut short link for a URL and get a matching QR code. Unlike a static QR, this one points at the short link, so update_link can change where it goes after it has been printed, and every scan is counted (country, device, referrer). Destinations are screened with Google Safe Browsing. Requires a ShareCut API key (Business plan).
  - after: Create a ShareCut short link for a URL and get a matching QR code. Unlike a static QR, this one points at the short link, so update_link can change where it goes after it has been printed, and every scan is counted (country, device, referrer). Destinations are screened with Google Web Risk. Requires a ShareCut API key (Business plan).

Full history: https://api.protogrid.dev/v1/servers/io.github.LucaRSdeCo%2Fsharecut-mcp/changes

## Dependencies

- npm sharecut-mcp@1.1.0: resolved, 0 dependencies

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://sharecut.site/mcp (streamable-http, auth none, reachable true, uptime30d 0.95652175)

## Packages

- npm sharecut-mcp@1.1.0 secrets: SHARECUT_API_KEY

## Tools (12)

- `check_short_code`: FREE, no API key needed. Check whether a custom short code is still free before trying to claim it with shorten_url. Codes are lowercase letters, digits and hyphens, up to 10 characters.
- `create_qr`: FREE, no API key needed. Render any URL or text as a QR code and return it as SVG, optionally also as a PNG data URL. This QR is STATIC: its destination is baked in and cannot be changed once printed. If the destination might ever change, use shorten_url instead — that QR points at a ShareCut short link, stays editable after printing (see update_link) and counts every scan.
- `delete_link`: Permanently delete a link and its click history. Every QR code and shared copy pointing at it stops working immediately, and the short code is released. There is no undo. Prefer update_link when the goal is to send the link somewhere else. Requires a ShareCut API key (Business plan).
- `expand_short_link`: FREE, no API key needed. Look up where a sharecut.site short link actually goes, and how many times it has been used, without opening it. Useful before following or forwarding a link someone sent. Only resolves ShareCut links.
- `get_account`: Read the plan behind the API key, what it entitles, how much of this month’s API quota is left and when it resets, plus how many links the account holds and their total clicks. Worth calling before a bulk run. Requires a ShareCut API key (Business plan).
- `get_link`: Read one link on the account: its destination, title, click count, creation date and UTM settings. Requires a ShareCut API key (Business plan).
- `get_link_analytics`: Read the click analytics of one link: total clicks, a daily series, and breakdowns by country, device, operating system, browser and referrer. Requires a ShareCut API key (Business plan).
- `get_link_qr`: Fetch the QR code for an existing link, ready to print. Returns the artwork saved on the link when there is one (frames, colours and logo set in the ShareCut editor), otherwise renders a plain code for its short URL. Requires a ShareCut API key (Business plan).
- `list_links`: List the links on the account the API key belongs to: short links, link-in-bio pages and restaurant menus, with their click counts. Filter by type or by a search term, and sort by newest or by most clicked. Requires a ShareCut API key (Business plan).
- `shorten_url`: Create a ShareCut short link for a URL and get a matching QR code. Unlike a static QR, this one points at the short link, so update_link can change where it goes after it has been printed, and every scan is counted (country, device, referrer). Destinations are screened with Google Web Risk. Requires a ShareCut API key (Business plan).
- `shorten_urls_bulk`: Create up to 25 short links in one call. Each entry takes the same fields as shorten_url. Failures are reported per item, so one bad URL does not discard the rest. Requires a ShareCut API key (Business plan).
- `update_link`: Re-point an existing short link at a new destination, or change its title, description or UTM parameters. This is what makes a printed QR code reusable: the code encodes the short link, so changing the destination redirects every copy already printed, shared or stuck on a wall, and the click history is kept. The new destination is screened with Google Web Risk. The short code itself never changes here, because changing it would break every copy already out there. Requires a ShareCut API key (Business plan).