ai.ironshard/agent-storage-sandbox

MCPcommunitylive
v1.0.0ai.ironshardUnknownUpdated 1mo ago

Create a free sandbox object storage bucket; upload, download, list, inspect, and delete objects.

Endpoint healthlive
checked 9 days ago · 1279ms
100% of the last 5 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorai.ironshard
LicenseUnknown
Version1.0.0
Sourcemcp-registry
Trust Status
B
60/100Good
Hosted endpoint only: this assessment covers who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code.
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
✓Prompt-injection scan · clean+30/30
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface8 tools · 2 privileged
Security scan✓ Cleanvlive · 9d agoHow well does this scan work?
EvalsNone
IndexedAug 25, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

8 tools · 2 privileged
Observed live from the vendor's endpoint9d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://agents-mcp.ironshard.ai/mcp8 tools · 1279ms
create_bucketCreates a 30-day bucket and its secret bearer token.

Creates a 30-day bucket and its secret bearer token.

No input schema was published for this tool.

get_bucket_permissionsReturn currently permitted buckets and operations.

Return currently permitted buckets and operations.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
bucket_token*stringSecret bearer token returned with the public bucket.
get_bucketReturn bucket details with storage and egress usage.

Return bucket details with storage and egress usage.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
bucket_token*stringSecret bearer token returned with the public bucket.
upload_objectprivilegedReturn a secret, short-lived PUT URL for an object up to 5 GB.

Return a secret, short-lived PUT URL for an object up to 5 GB.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
object_key*stringComplete object key, including path-like prefixes.
bucket_token*stringSecret bearer token returned with the public bucket.
download_objectReturn a secret, short-lived GET URL for an object's bytes.

Return a secret, short-lived GET URL for an object's bytes.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
object_key*stringComplete object key, including path-like prefixes.
bucket_token*stringSecret bearer token returned with the public bucket.
list_objectsList one page of objects and path-like prefixes, ordered by key.

List one page of objects and path-like prefixes, ordered by key.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
bucket_token*stringSecret bearer token returned with the public bucket.
prefix—Only return keys beginning with this prefix.
recursivebooleanTrue for a flat listing; false for immediate children.
page_sizeintegerMaximum objects to return, from 1 to 1000.
page_token—Opaque continuation token from the preceding page.
delete_objectprivilegedDelete an object; versioned buckets may retain older versions.

Delete an object; versioned buckets may retain older versions.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
object_key*stringComplete object key, including path-like prefixes.
bucket_token*stringSecret bearer token returned with the public bucket.
get_object_metadataReturn an object's size, timestamps, ETag, content type, metadata, and tags.

Return an object's size, timestamps, ETag, content type, metadata, and tags.

ParameterTypeDescription
bucket_name*stringBucket to operate on.
object_key*stringComplete object key, including path-like prefixes.
bucket_token*stringSecret bearer token returned with the public bucket.

8 of 8 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Create a free sandbox object storage bucket; upload, download, list, inspect, and delete objects.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.