English Français العربية

HaoyouBox Publish

Official registry Productivity

Publish local HTML or Markdown as expiring password-protected HaoyouBox links.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package haoyoubox-mcp
Claude Code 
claude mcp add haoyoubox-publish -e 'HAOYOUBOX_TOKEN=<your haoyoubox_token>' -- npx -y haoyoubox-mcp@1.0.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "haoyoubox-publish": {
            "command": "npx",
            "args": [
                "-y",
                "haoyoubox-mcp@1.0.0"
            ],
            "env": {
                "HAOYOUBOX_TOKEN": "<your haoyoubox_token>"
            }
        }
    }
}

Environment variables

  • HAOYOUBOX_TOKEN secret Optional publish-only HaoyouBox Agent token

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. HaoyouBox Agent Skill
  2. Install
  3. Use
  4. What It Publishes
  5. Security
  6. Product
  7. Contributing
  8. License

HaoyouBox Agent Skill

中文说明

Publish one local HTML or Markdown file to HaoyouBox from a compatible AI agent. The Skill creates an expiring, password-protected browser link and returns the complete link, visible password, and actual expiry.

This repository contains the open Agent Skill and its documentation. The hosted HaoyouBox service and server source are not part of this repository.

Install

Codex, Claude Code, Cursor, and other supported agents

Use the cross-agent Skills installer:

npx skills add cheng-big/haoyoubox-agent-skill --skill haoyoubox-publish -g

Review the Skill before you approve installation. Restart or reload your agent if it does not discover the Skill immediately.

Gemini CLI
gemini skills install https://github.com/cheng-big/haoyoubox-agent-skill --path skills/haoyoubox-publish

Gemini CLI asks for installation consent. Use /skills list after installation to confirm that haoyoubox-publish is enabled.

Manual installation

Copy the skills/haoyoubox-publish directory into a Skill location supported by your agent, such as ~/.agents/skills/haoyoubox-publish.

The current hosted copy remains available at haoyoubox.com/agent/SKILL.md.

Use

Ask your agent:

Publish report.html to HaoyouBox and create a password-protected link that expires in 24 hours. Use English for the receiver page. Return the complete link, password, and actual expiry together.

For a Chinese receiver page:

把 report.html 发布到好友盒，生成 24 小时密码保护链接。接收页使用中文。请一起返回完整链接、密码和实际到期时间。

On first use, the agent opens a HaoyouBox device approval flow. You sign in to HaoyouBox and approve the device. The agent then stores the publish token in its private credential store.

What It Publishes

  • One explicit .html, .htm, .md, or .markdown file.
  • A fixed browser-ready version on HaoyouBox.
  • A password-protected link with a server-enforced expiry.
  • A Chinese or English receiver interface.

The Skill does not upload directories, ZIP files, hidden files, environment files, keys, symlinks, or an entire workspace. It does not read upload history, delete pages, revoke links, or manage accounts.

Security

  • Review the Skill before installation.
  • Device approval always requires an explicit user action.
  • The publish token must stay in the agent's private credential store.
  • The raw share password is derived locally. HaoyouBox receives a salt and verifier, not the raw password.
  • The complete share link includes the password for convenient prefill. Treat the complete link as one sensitive access credential.
  • Do not publish files that contain secrets, personal data, private keys, or environment variables.

See SECURITY.md for vulnerability reporting and token-response steps.

Product

Recipients open the generated link in a browser. They do not need to install this Skill or create a HaoyouBox account.

Contributing

See CONTRIBUTING.md. Run npm test before opening a pull request.

License

The files in this repository are licensed under the Apache License 2.0. Use of the hosted HaoyouBox service remains subject to the product's published terms and policies.

Frequently asked questions

What is HaoyouBox Publish?

Publish local HTML or Markdown as expiring password-protected HaoyouBox links.

How do I install HaoyouBox Publish?

It runs on your machine. In Claude Code: claude mcp add haoyoubox-publish -e 'HAOYOUBOX_TOKEN=<your haoyoubox_token>' -- npx -y haoyoubox-mcp@1.0.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does HaoyouBox Publish need an API key?

Yes. It expects HAOYOUBOX_TOKEN, which you set in its configuration.

Is HaoyouBox Publish open source?

Yes. Its code is on GitHub under the Apache-2.0 license.

Who maintains HaoyouBox Publish?

It is published by cheng-big. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.