English Français العربية

ai.justdrop/mcp

Official registry AI and agents

Live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package justdrop-mcp
Claude Code 
claude mcp add ai-justdrop-mcp -e 'JUSTDROP_ROOT=<JUSTDROP_ROOT>' -e 'JUSTDROP_DEFAULT_EXPIRY_MINUTES=<JUSTDROP_DEFAULT_EXPIRY_MINUTES>' -- npx -y justdrop-mcp@0.1.6
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "ai-justdrop-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "justdrop-mcp@0.1.6"
            ],
            "env": {
                "JUSTDROP_ROOT": "<JUSTDROP_ROOT>",
                "JUSTDROP_DEFAULT_EXPIRY_MINUTES": "<JUSTDROP_DEFAULT_EXPIRY_MINUTES>"
            }
        }
    }
}

Environment variables

  • JUSTDROP_ROOT The only directory the server may read files from or save files into (root jail). Defaults to the working directory.
  • JUSTDROP_DEFAULT_EXPIRY_MINUTES Room lifetime in minutes when a tool call doesn't specify one (1-1440, default 60).

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. justdrop-mcp
  2. Install
  3. Tools
  4. Configuration
  5. Safety model
  6. How the transfer works
  7. Local development
  8. License

justdrop-mcp

Give your AI agent a way to hand you files — live, end-to-end encrypted, nothing stored.

justdrop-mcp is an MCP (Model Context Protocol) server for JustDrop. Your agent creates a room, you scan a QR or open a link on any device, and the files move — encrypted before they leave the machine, decrypted only on yours, gone when the room closes. No account on either end. The receiving device needs nothing installed: just a browser.

You:    "drop dist/report.pdf to my phone"
Agent:  Room code: brave-otter-4821
        Link: https://justdrop.ai/app#join=brave-otter-4821
        [QR code]
You:    *scan, tap, done — the room self-destructs*

It works the other way too: "grab the screenshot from my phone" gives you a QR; whatever you drop from the phone lands decrypted in your working directory, and the agent keeps working with it.

Install

Requires Node.js 20+.

claude mcp add justdrop -- npx -y justdrop-mcp

Or in .mcp.json / any MCP client config:

{
  "mcpServers": {
    "justdrop": {
      "command": "npx",
      "args": ["-y", "justdrop-mcp"],
      "env": {
        "JUSTDROP_ROOT": "C:/path/to/allowed/folder"
      }
    }
  }
}

Tools

ToolWhat it does
dropSend files/folders. Returns room code + link + QR immediately; the transfer runs automatically when the recipient opens the link. Pass room_code to send into an existing room instead.
receiveReceive files into a directory. Creates a room (code + link + QR) and saves anything dropped into it, decrypted, automatically. Pass room_code to join a room someone else created.
statusLive progress: peer presence, per-file state, saved paths.
cancelDestroys a room this session created (files + metadata deleted), or leaves a joined room.

Configuration

Env varDefaultMeaning
JUSTDROP_BASE_URLhttps://justdrop.aiBackend to talk to (point at http://localhost:3000 for local dev).
JUSTDROP_ROOTserver's working directoryThe only directory the server may read from / save into.
JUSTDROP_DEFAULT_EXPIRY_MINUTES60Room lifetime when a tool doesn't specify one (1–1440).

Safety model

An MCP server that reads local files is a prompt-injection target, so the guardrails are structural, not polite suggestions:

  • Root jail — every path (sent or saved) must resolve inside JUSTDROP_ROOT. Anything else is refused.
  • Credential refusal — dotfiles (.env, .npmrc, …), SSH/TLS keys, keystores, cloud credential files, and shell histories are never sent, even when named explicitly. There is no override flag.
  • Explicit manifests — every drop result lists exactly which files were queued, so the user sees what's leaving.
  • Server-side blocklist parity — extensions JustDrop rejects (.exe, .bat, …) are refused up front with a hint to zip instead.
  • Ephemeral by default — rooms carry an expiry (default 60 min) and self-destruct after delivery.

How the transfer works

  1. drop creates a room and registers an RSA-2048 public key; the tool returns the code/link/QR immediately.
  2. When the recipient opens the link, their browser registers its own key. Rooms are one-to-one by design — treat the room code like the secret it is.
  3. Each file gets a fresh AES-256-GCM key, encrypted for both parties' RSA keys. The encrypted blob is relayed through short-lived signed URLs — the relay never sees plaintext or keys.
  4. Delivery is observed live; the room (and everything in it) is destroyed afterwards.

Files are encrypted in one shot in memory (format parity with the web app), so very large files need commensurate RAM. The hard cap is 2GB per file.

Local development

npm install
npm run verify   # builds, boots ../justdrop-simple dev server, runs both test suites

# or piecewise, against a server you started yourself:
npm run build
node test/e2e.mjs http://localhost:3000        # core roundtrip (both directions + SSE)
node test/mcp-smoke.mjs http://localhost:3000  # full MCP stdio protocol exercise

License

MIT

Frequently asked questions

What is ai.justdrop/mcp?

Live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device.

How do I install ai.justdrop/mcp?

It runs on your machine. In Claude Code: claude mcp add ai-justdrop-mcp -e 'JUSTDROP_ROOT=<JUSTDROP_ROOT>' -e 'JUSTDROP_DEFAULT_EXPIRY_MINUTES=<JUSTDROP_DEFAULT_EXPIRY_MINUTES>' -- npx -y justdrop-mcp@0.1.6. For other clients, paste the JSON configuration from this page into their MCP settings.

Does ai.justdrop/mcp need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is ai.justdrop/mcp open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains ai.justdrop/mcp?

It is published by Managed-Digital-LLC. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.