Multi-tenant file authorization middleware and lifecycle for Postgres: a single decision point for public and private files, revocable URLs, delegated share links and a hash-chained audit trail.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
DATABASE_URLAPI keyrequiredYour own PostgreSQL, where this library keeps file ownership, grants and the audit chain. Apply node_modules/@filelayer/core/schema.sql once before starting.
S3_ACCESS_KEY_IDAPI keyoptionalAccess key id for the bucket.
S3_SECRET_ACCESS_KEYAPI keyoptionalSecret access key for the bucket.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
list_filesNo description publishedThis tool published no description. Forge does not invent one.
file_infoName, content type, size, owner and state for one file, without its contents.Name, content type, size, owner and state for one file, without its contents.
No input schema was published for this tool.
list_sharesEvery live grant on a file: who it is for, what it allows, when it expires.Every live grant on a file: who it is for, what it allows, when it expires.
No input schema was published for this tool.
share_with_userGrant another user read access to a file. `expiresInSeconds` is REQUIRED: aGrant another user read access to a file. `expiresInSeconds` is REQUIRED: a
No input schema was published for this tool.
create_share_linkA URL that carries its own authorization, for someone with no account.A URL that carries its own authorization, for someone with no account.
No input schema was published for this tool.
revoke_shareRemoves a single grant by id. The next request using it is refused; there isRemoves a single grant by id. The next request using it is refused; there is
No input schema was published for this tool.
unshare_userRevokes every live grant that person holds on that file. This is the toolRevokes every live grant that person holds on that file. This is the tool
No input schema was published for this tool.
read_fileNo description publishedThis tool published no description. Forge does not invent one.
file_auditNo description publishedThis tool published no description. Forge does not invent one.
delete_fileprivilegedMarks the file deleted and schedules its bytes for collection. NOTMarks the file deleted and schedules its bytes for collection. NOT
No input schema was published for this tool.
7 of 10 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Multi-tenant file authorization middleware and lifecycle for Postgres: a single decision point for public and private files, revocable URLs, delegated share links and a hash-chained audit trail.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.