# io.artifacta/mcp (npm · @artifacta-mcp/mcp)

Artifact store for AI agents. Hosted OAuth at mcp.artifacta.io/mcp; local stdio via npm/PyPI.

- Trust score: 66/100 (medium)
- Change this week: +19
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `mcp.artifacta.io`: 36/100, [markdown](https://verifymcp.io/servers/io-artifacta-mcp/mcp.md), [page](https://verifymcp.io/servers/io-artifacta-mcp/mcp)
- npm · `@artifacta-mcp/mcp`: 66/100 (this document), [markdown](https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp-mcp.md), [page](https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp-mcp)
- pypi · `artifacta-mcp`: 36/100, [markdown](https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp.md), [page](https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp)

## Channel facts

- Registry: `npm`
- Package: `@artifacta-mcp/mcp`
- Version: `1.0.4`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects @hono/node-server 1.19.17, reached via @modelcontextprotocol/sdk > @hono/node-server. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 33 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 81/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1582 tokens (~143/item across 11 items; 10 tools + 1 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 14% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add io-artifacta-mcp -- npx -y @artifacta-mcp/mcp
```

### Codex

```bash
codex mcp add io-artifacta-mcp -- npx -y @artifacta-mcp/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-artifacta-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@artifacta-mcp/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add io-artifacta-mcp --command npx --arg -y --arg @artifacta-mcp/mcp
```

### Hermes

```yaml
mcp_servers:
  io-artifacta-mcp:
    command: "npx"
    args: ["-y", "@artifacta-mcp/mcp"]
```

### Other

```json
{
  "mcpServers": {
    "io-artifacta-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@artifacta-mcp/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 66, +29)

- [security regression] GHSA-frvp-7c67-39w9 affects this package: medium
- [security regression] Known CVEs: unverified → fail
- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional] Licence: MIT

### 2026-08-01 (score 37, +8)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 29, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 47)

First indexed and scored.

## MCP tools (10)

### `whoami` (~65 tokens)

Return the calling tenant's identity, plan tier, current usage counters (storage bytes, monthly requests, active links), and rate limits. Use this once at the start of an agent run to confirm authentication and to size subsequent operations against quota. Free of side effects and quota-cheap.

### `list_artifacts` (~191 tokens)

List artifacts owned by the calling tenant, newest first. Supports filters by `session_id`, `agent_id`, `filename` (exact match), `content_type`, `created_after` / `created_before` (ISO 8601), and one or more `metadata.<key>=<value>` pairs (multi-key requires Pro). Returns a page of artifact records and a `next_cursor` to fetch the next page. Use this to discover what an agent or pipeline produced when you only know a session or agent ID.

Input parameters:

- `agent_id` (string)
- `content_type` (string)
- `created_after` (string)
- `created_before` (string)
- `cursor` (string): Opaque cursor from previous page's next_cursor.
- `filename` (string)
- `limit` (integer)
- `metadata` (object)
- `session_id` (string)

### `get_artifact` (~108 tokens)

Fetch metadata for a single artifact by ID: filename, content type, size, content hash, session/agent IDs, custom metadata, expiry, creation timestamp. Does NOT return the file bytes — call `get_artifact_download_url` for that. Returns `artifact_not_found` for unknown IDs, `artifact_already_deleted` (HTTP 410) for soft-deleted ones, `artifact_expired` (410) for those past their TTL.

Input parameters:

- `artifact_id` (string, required)

### `get_artifact_download_url` (~93 tokens)

Generate a short-lived presigned URL (1 hour) the agent can use to download the artifact's bytes directly from Cloudflare R2. Use this when the agent itself needs to consume the file. For sharing with humans, use `create_download_link` instead — that produces a stable `dl.artifacta.io/lnk_…` URL with configurable expiry.

Input parameters:

- `artifact_id` (string, required)

### `list_sessions` (~87 tokens)

List session IDs synthesized from the calling tenant's artifacts, ordered by most recent activity. Each entry includes artifact count, seal status, and first/last activity timestamps. Sessions are not first-class — they exist only as long as artifacts reference them.

Input parameters:

- `created_after` (string)
- `created_before` (string)
- `cursor` (string)
- `limit` (integer)

### `store_artifact` (~462 tokens)

Upload a file as a new artifact in a single call. Provide EITHER up to ~10 MB of base64-encoded bytes via `content`, OR a local filesystem `path` that the MCP server reads and streams as multipart/form-data (up to 500 MB). For files larger than 500 MB, use `request_upload_url` (Pro only) instead — `store_artifact` returns `file_too_large` for them. Tags the artifact with `session_id` / `agent_id` / `metadata` for later retrieval and returns the full artifact record including its new `artifact_id` and `content_hash`.

Path uploads are confined. The `path` argument is constrained to the launcher-configured allow-list (default: the MCP server's CWD). Paths outside the allow-list, paths traversing symlinks out of it, and paths to known-sensitive locations (`~/.ssh`, `~/.aws`, `/etc/`, etc.) are refused with `invalid_request`.

For crash-safe retries, supply your own `idempotency_key` (any string ≤256 chars): a replay within 24h returns the original artifact and never double-bills. If you omit it, the server auto-generates one and returns it under `_meta.idempotency_key`, but that key protects only in-process retries within a single call — it is lost if the server restarts, so pre-commit your own key when durability matters.

Input parameters:

- `agent_id` (string)
- `content` (string): Base64-encoded bytes. Use for content under 10 MB or when no local path is available.
- `content_type` (string): MIME type. If omitted, guessed from filename.
- `filename` (string, required)
- `idempotency_key` (string)
- `metadata` (object)
- `path` (string): Absolute local path inside the launcher-configured allow-list. The MCP server reads and streams this as multipart. Mutually exclusive with `content`. Paths outside the allow-list are refused.
- `session_id` (string)
- `ttl` (string): Duration suffix (e.g. `7d`, `30d`) or `never` (Pro only). Defaults to plan default.

### `request_upload_url` (~241 tokens)

Reserve a presigned R2 PUT URL for a file too large to send through `store_artifact` (over 500 MB up to 5 GB). Returns an `upload_url`, headers to include in the PUT, and an `artifact_id` in `pending` state. The agent (or its environment) PUTs the bytes directly to R2, then calls `complete_upload`. Pro plan only. Most agents should use `store_artifact` and let the MCP server pick the path automatically.

Not retry-safe: this endpoint does not support idempotency keys, so on an HTTP 5xx or network error the reservation may or may not have been created. Do NOT blindly retry — the error guidance tells you to first call `list_artifacts` with the same `session_id`/`agent_id` to detect any pending artifact, so you don't create a duplicate.

Input parameters:

- `agent_id` (string)
- `content_type` (string, required)
- `filename` (string, required)
- `metadata` (object)
- `session_id` (string)
- `size_bytes` (integer, required)
- `ttl` (string)

### `complete_upload` (~99 tokens)

Finalize an artifact previously reserved via `request_upload_url` after the bytes have been PUT to the presigned URL. Server verifies the blob, computes the content hash, transitions the artifact from `pending` to `active`, and increments tenant usage. Calling this on an already-active artifact is idempotent and returns the existing record. Calling before the PUT completes returns `upload_not_found` — wait and retry.

Input parameters:

- `artifact_id` (string, required)

### `publish_artifact` (~127 tokens)

Publish an existing artifact as a polished, shareable public page at https://artifacta.io/a/{slug}. Composes with store_artifact (store first, then publish). Returns a public_url anyone can open without an Artifacta account. Default visibility is unlisted (link-only); pass visibility:"public" for gallery-eligible later. Idempotent: re-publishing the same artifact_id updates the existing page and keeps the same URL.

Input parameters:

- `access` (string)
- `artifact_id` (string, required)
- `title` (string)
- `visibility` (string)

### `unpublish_artifact` (~72 tokens)

Remove the public page for an artifact, making the public URL inaccessible. The artifact itself is not deleted — only its shareable page is taken down. The URL stops resolving immediately. Idempotent: calling unpublish on an already-unpublished artifact is a no-op.

Input parameters:

- `artifact_id` (string, required)

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp-mcp#diagnostics

## Score history

- 2026-08-03: 66
- 2026-08-02: 66
- 2026-08-01: 37
- 2026-07-31: 29
- 2026-07-30: 47
- 2026-07-28: 47
- 2026-07-27: 47

## Links

- npm package: https://www.npmjs.com/package/@artifacta-mcp/mcp
- Socket report: https://socket.dev/npm/package/@artifacta-mcp/mcp
- Repository: https://github.com/SagaPeak/artifacta-mcp
- Changelog RSS feed: https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/io-artifacta-mcp/artifacta-mcp-mcp