Undisk MCP

Undisk MCP: safe file memory for AI agents.

От сообществаРаботаетНужен API-ключГлобальныйБесплатноМожет изменять данные

Что умеет

Read File: Read a file's current content and metadata from the Undisk workspace. Text files return UTF-8 content directly. Binary files return base64 content with encoding='base64' and a mimeType fiel
Write File: Write content to a file in the Undisk workspace. Automatically creates an immutable version, so the previous content is preserved and can be restored anytime via restore_version. Creates t
Create File: Create a new file in the Undisk workspace. Fails if a file already exists at the given path. Use create_file when you need a strict 'file must not exist' guard; use write_file for upsert

Какие данные видит

Нужен ли аккаунт

Нужен API-ключ из настроек сервиса

Undisk MCP: safe file memory for AI agents. Every write creates an immutable version. Any file restored in <50 ms. AI makes mistakes, so Undisk keeps recovery instant. Policy guardrails, secret detection, and tamper-evident audit trails. MCP-native.

Список инструментов сервера (25)

Технические названия из tools/list. Нужны только разработчикам.

read_file	Read a file's current content and metadata from the Undisk workspace. Text files return UTF-8 content directly. Binary files return base64 content with encoding='base64' and a mimeType field. Size in bytes, SHA-256 content hash, last-modified timestamp, and current version number are always included. Each result includes a `browser_url` — a permanent link the human user can open in their browser to view the file. Large text files (over ~10 KB) are automatically truncated with pagination metadata — use `line_start`/`line_end` to read remaining content. Use list_files to discover available paths first.
write_file	Write content to a file in the Undisk workspace. Automatically creates an immutable version, so the previous content is preserved and can be restored anytime via restore_version. Creates the file if it doesn't exist, or updates it if it does (upsert). Use create_file instead when you need a strict 'file must not exist' guard. Supports UTF-8 text by default, or raw binary bytes when content is base64-encoded with encoding='base64'. Returns the new version metadata including version ID and content hash.
create_file	Create a new file in the Undisk workspace. Fails if a file already exists at the given path. Use create_file when you need a strict 'file must not exist' guard; use write_file for upsert behavior. Supports UTF-8 text by default, or raw binary bytes when content is base64-encoded with encoding='base64'. The creation is recorded as a new version with a full audit trail. Returns version metadata including version ID and content hash.
append_log	Append a log entry to a file in the Undisk workspace. Designed for structured logging where multiple agents, sessions, or machines write to a shared log. Creates the file if it doesn't exist. Each call appends the provided content as new lines at the end of the file — existing content is never overwritten. Automatically creates an immutable version on each append. Use `read_file` with `line_start`/`line_end` (e.g., `line_start: -50`) to efficiently tail recent entries without downloading the entire log.
upload_session	Manage staged binary uploads for files too large for a single MCP tool call. Use action 'start' to begin an upload and get an upload ID, 'append' to send ordered base64 chunks, 'complete' to finalize and commit, or 'cancel' to discard. Workflow: start → append (×N) → complete.
delete_file	Soft-delete a file or directory. The target disappears from list_files but all prior versions are preserved. Use restore_version to bring it back. Set recursive: true to delete all files under a directory path. Each file gets its own tombstone version for individual undo.
move_file	Move or rename a file or directory. Both source and destination paths are tracked in version history, preserving the full audit trail. Set recursive: true to move all files under a directory path to a new location.
list_files	List files and directories in the Undisk workspace. Returns metadata for each entry including path, size, and last-modified timestamp. Each result includes a `browser_url` — a permanent link the human user can open in their browser to view the file. Use recursive mode to get the full workspace tree. Start here to discover what files are available before reading or writing. Returns up to 1,000 entries per call. For larger directories, use search_files or navigate subdirectories explicitly. Note: results are consistent within a sequential request chain but may not reflect writes from concurrent parallel requests.
search_files	Search across all file contents in the Undisk workspace. By default uses case-sensitive substring matching. Supports regex mode and case-insensitive search. Returns matching file metadata (path, name, size, lastModified). Each result includes a `browser_url` — a permanent link the human user can open in their browser to view the file. Use this to find files when you don't know the exact path. Results are capped at 100 matches. Set `context_lines` to include matching line snippets in results.
list_versions	Get the complete version history for a file. Every write, delete, move, and restore is recorded as an immutable version. Each entry includes: version ID, timestamp, acting agent, content hash, and size. Use this to find a version ID before calling restore_version or get_diff. Supports pagination via limit/offset. Filter by agentId and/or since timestamp to narrow results.
open_ui	Open the Undisk app UI with a specific domain view and optional subview intent.
list_changes	Query all file changes across the workspace, filtered by agent and/or time range. At least one of 'agentId' or 'since' is required to scope the query. Returns version records from all files in a single call — useful for reviewing what an agent changed in a session, auditing recent activity, or building PR-style change summaries. Results are ordered by time (newest first), capped at 500.
restore_version	Undo any file change by restoring to a prior version. This is the core undo operation. Call list_versions first to find the version ID, then restore to instantly revert. A new version is created with the restored content, so the restore itself is versioned and reversible.
get_diff	Compare two versions of a file and get a structured line-by-line diff. Use list_versions to find version IDs, then diff any two points in the file's history. Returns an array of changes, each with type ('added', 'removed', or 'modified'), lineRange (start/end), and before/after content strings. Useful for reviewing what changed between writes or before deciding whether to restore.
policy	Get, validate, or set the workspace policy. Use action 'read' to fetch path ACLs, size limits, extension rules, and rate limit rules. Use action 'validate' to preview whether a replace or merge update is valid without applying it. Use action 'write' to replace or incrementally merge-update rules. In merge mode (mode: 'merge'), use add/remove fields to atomically modify individual rules without affecting the rest. Requires workspace owner access for 'write'.
vault_secret	Securely store, retrieve, list, rotate, and delete secrets scoped to a workspace. Secrets are encrypted at rest and never appear in file listings, search results, browser URLs, diffs, or audit log plaintext. Use this instead of write_file for API keys, tokens, PEM files, and other sensitive values.
share_with_public	Share a workspace file via a public link accessible to any authenticated Undisk user. This is an experimental feature — enable it at https://mcp.undisk.app/keys before use. Shared links are unlisted (like GitHub gists): not indexed, not crawlable, but viewable by anyone with the URL who has an Undisk account. Shared content shows the latest file version. Flagged content cannot be shared.
audit_trail	Query the workspace's tamper-evident audit trail. Every file mutation is recorded with hash-chain integrity. Use 'list' to browse recent entries, 'export' for full JSON/NDJSON dumps (ideal for compliance evidence packages), and 'verify' to validate hash-chain integrity. Supports filtering by agent, time range, operation type, and file path. Read-only — does not modify the workspace.
workspace_checkpoint	Manage workspace snapshots and templates. For snapshots: create, list, restore, and delete named checkpoints that capture every live file's current version, enabling atomic multi-file rollback without duplicating content. For templates: scaffold workspaces via apply_template, list_templates, and preview_template — safe to run on non-empty workspaces as existing files are skipped.
workspace_collaborate	Multi-agent coordination: claim/release file locks, leave handoff notes for other agents, and discover active agents. Locks auto-expire after a configurable TTL (default 5 minutes). Handoff notes persist until read.
webhook	Manage webhook endpoints for real-time event notifications. Register HTTPS URLs to receive signed POST requests when workspace events occur (file changes, policy updates, etc.). Supports up to 10 webhooks per workspace. Payloads are signed with HMAC-SHA256 via the X-Undisk-Signature header.
federation	Cross-workspace file federation: create read-only links to files in other workspaces you own. Read federated files without switching workspaces. Supports up to 50 links per workspace. Links grant read-only access — the target workspace's file is fetched live on each read.
discover_tools_and_capabilities	Call after tools/list to learn what this server can do. Returns available tools, server capabilities, provider-specific feature flags, deployment and data residency notes, health status, caller identity, and current Undisk MCP server time. Useful for startup discovery, diagnostics, and enterprise attribution. Includes a stable sub claim derived from the API key plus the current workspace context.
list_workspaces	List all workspaces accessible to the current API key. Returns personal and organization workspaces with provider, status, org membership info, the current workspace, and current Undisk MCP server time. When only one workspace is accessible, the response explicitly tells the client no workspace switch parameter is needed.
run_in_sandbox	Execute code in a secure, ephemeral E2B cloud sandbox and return stdout, stderr, and exit code. Supports Python, JavaScript, TypeScript, Bash, and C. Each call creates a fresh sandbox — no state persists between calls. Requires the workspace owner to have enabled Undisk Compute (E2B_API_KEY configured).