CLI and client for uploads.sh — workspace-scoped image hosting for GitHub embeds
Inferido de los transportes que declara este listado (stdio, streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
UPLOADS_TOKENClave de APIobligatoriaWorkspace bearer token (up_<workspace>_…). Mint with uploads login.
Declarado por el autor en el registro oficial de MCP. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído del código que npm publica realmente, en el momento del análisis. El paquete nunca se ejecutó. Las herramientas registradas dinámicamente en tiempo de ejecución, o escondidas en código empaquetado o minificado, pueden pasarse por alto — así que esto es un mínimo de la superficie de herramientas, no un censo completo.
gallery_createCreate a public ordered media gallery in the workspace. The returned canonical URL is safe to give users, but anyone who knows it can view the gallery and its media.Create a public ordered media gallery in the workspace. The returned canonical URL is safe to give users, but anyone who knows it can view the gallery and its media.
No se publicó ningún esquema de entrada para esta herramienta.
gallery_getGet a workspace-owned gallery, including ordered media and its canonical public URL. Gallery media is public to anyone with the URL.Get a workspace-owned gallery, including ordered media and its canonical public URL. Gallery media is public to anyone with the URL.
No se publicó ningún esquema de entrada para esta herramienta.
gallery_addAdd one existing, publicly served workspace object to a gallery. Reads the latest gallery version before writing, so the optimistic API version is handled safely. Does not upload or delete the object.Add one existing, publicly served workspace object to a gallery. Reads the latest gallery version before writing, so the optimistic API version is handled safely. Does not upload or delete the object.
No se publicó ningún esquema de entrada para esta herramienta.
gallery_linkLink a gallery to an external reference. References use provider-neutral fields; github currently accepts owner/repo#number or a strict GitHub issue/PR URL. No GitHub credentials or API calls are used.Link a gallery to an external reference. References use provider-neutral fields; github currently accepts owner/repo#number or a strict GitHub issue/PR URL. No GitHub credentials or API calls are used.
No se publicó ningún esquema de entrada para esta herramienta.
gallery_find_by_referenceFind workspace galleries linked to an external reference. Returns gallery summaries and canonical public URLs without contacting the provider.Find workspace galleries linked to an external reference. Returns gallery summaries and canonical public URLs without contacting the provider.
No se publicó ningún esquema de entrada para esta herramienta.
putSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
screenshotCapture a URL or local HTML file and host it. Shares put's attach, comment, and metadata options. `via=local` needs Chrome; `via=remote` renders server-side. localhost URLs are local-only.Capture a URL or local HTML file and host it. Shares put's attach, comment, and metadata options. `via=local` needs Chrome; `via=remote` renders server-side. localhost URLs are local-only.
No se publicó ningún esquema de entrada para esta herramienta.
attachSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
listList uploaded objects in the workspace, filtered by key prefix or by a PR/issue's attachments. Paginate with cursor, or set all to fetch every page.List uploaded objects in the workspace, filtered by key prefix or by a PR/issue's attachments. Paginate with cursor, or set all to fetch every page.
No se publicó ningún esquema de entrada para esta herramienta.
stagedList files staged for a git branch and whether they will auto-attach when a PR opens. Returns `{ repo, branch, files, binding }`.List files staged for a git branch and whether they will auto-attach when a PR opens. Returns `{ repo, branch, files, binding }`.
No se publicó ningún esquema de entrada para esta herramienta.
deleteprivilegiadaDelete an uploaded object by key. Set dryRun to preview without deleting.Delete an uploaded object by key. Set dryRun to preview without deleting.
No se publicó ningún esquema de entrada para esta herramienta.
get_metadataRead the queryable tags on one file. Returns `{ metadata }` (empty when none). Same as `uploads meta get`.Read the queryable tags on one file. Returns `{ metadata }` (empty when none). Same as `uploads meta get`.
No se publicó ningún esquema de entrada para esta herramienta.
set_metadataSet or delete queryable tags on an existing file. `set` wins over `delete` for the same key. Requires `set` and/or `delete`. Same as `uploads meta set`.Set or delete queryable tags on an existing file. `set` wins over `delete` for the same key. Requires `set` and/or `delete`. Same as `uploads meta set`.
No se publicó ningún esquema de entrada para esta herramienta.
find_filesSearch files by metadata (`filters`) and/or filename substring (`name`). At least one is required. Same as `uploads find`.Search files by metadata (`filters`) and/or filename substring (`name`). At least one is required. Same as `uploads find`.
No se publicó ningún esquema de entrada para esta herramienta.
list_metadata_keysList metadata keys in the workspace (with counts). Pass `key` to list that key's values instead. Use before `find_files`. Same as `uploads meta keys`.List metadata keys in the workspace (with counts). Pass `key` to list that key's values instead. Use before `find_files`. Same as `uploads meta keys`.
No se publicó ningún esquema de entrada para esta herramienta.
usageWorkspace storage and monthly upload counters (and remaining headroom when budgets are configured). Same as `uploads usage`.Workspace storage and monthly upload counters (and remaining headroom when budgets are configured). Same as `uploads usage`.
No se publicó ningún esquema de entrada para esta herramienta.
reconcileRebuild usage ledger bytes/objects from storage (source of truth). Preserves the monthly upload counter. Requires files:write. Same as `uploads reconcile`.Rebuild usage ledger bytes/objects from storage (source of truth). Preserves the monthly upload counter. Requires files:write. Same as `uploads reconcile`.
No se publicó ningún esquema de entrada para esta herramienta.
purge_expiredDelete objects older than the workspace retentionDays setting, then reconcile. Skips if retention is unset. Requires files:delete. Same as `uploads purge-expired`.Delete objects older than the workspace retentionDays setting, then reconcile. Skips if retention is unset. Requires files:delete. Same as `uploads purge-expired`.
No se publicó ningún esquema de entrada para esta herramienta.
commentCreate or update the managed attachments comment on a GitHub PR or issue, listing everything uploaded for it. Posts as uploads-sh[bot] when the GitHub App is installed on the repo; otherwise via local gh auth. Edits its own prior comment in place and never touches other comments.Create or update the managed attachments comment on a GitHub PR or issue, listing everything uploaded for it. Posts as uploads-sh[bot] when the GitHub App is installed on the repo; otherwise via local gh auth. Edits its own prior comment in place and never touches other comments.
No se publicó ningún esquema de entrada para esta herramienta.
whoamiShow the active uploads.sh identity: workspace, API URL, and token scopes. Use this to learn which workspace you're talking to. A successful result also means the API is up. For a full setup diagnosis, use `doctor`.Show the active uploads.sh identity: workspace, API URL, and token scopes. Use this to learn which workspace you're talking to. A successful result also means the API is up. For a full setup diagnosis, use `doctor`.
No se publicó ningún esquema de entrada para esta herramienta.
doctorDiagnose the configuration: API health, token auth, and workspace/token alignment. Returns the same report as `uploads doctor --json`, including hints.Diagnose the configuration: API health, token auth, and workspace/token alignment. Returns the same report as `uploads doctor --json`, including hints.
No se publicó ningún esquema de entrada para esta herramienta.
reportSend an explicit diagnostic report to the uploads team (message + optional text log).Send an explicit diagnostic report to the uploads team (message + optional text log).
No se publicó ningún esquema de entrada para esta herramienta.
20 de 22 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
CLI and client for uploads.sh — workspace-scoped image hosting for GitHub embeds
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
No se siguen: optionalDependencies. Este árbol cubre solo dependencias en tiempo de ejecución, así que lo que estas arrastren nunca se resolvió.