Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

KeibiDrop

MCPB · KEIBIDROP-MCP.MCPB

Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move.

Available components

−3 this week 52 Trust /100

Last scanned (6 hours ago)

Scores higher than 84% of MCPB servers

Category Documents and Files

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency48
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • Clear OSI-approved license (AGPL-3.0-only).Pass
  • Actively maintained (last published 15 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability83
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2027 tokens (~106/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
  • Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "kd_send_file" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 −3
    • Stability: pass → 0.80 functional
  • 30 Oct 26 0
    • Stability: 0.97 → pass security
  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

  • 21 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

  • 19 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed mcpb/https://github.com/KeibiSoft/KeibiDrop/releases/download/v0.5.1/keibidrop-mcp.mcpb

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem mcpb
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 19 exposed · ~1,770 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
kd_accept_peer ~86

Supply the other peer's code and start connecting. Returns immediately; the connection is established in the background, so poll kd_status until connected is true. Safe to call before the other peer has called anything: it retries for several minutes. Idempotent.

NameTypeReqDescription
codestringyesThe other peer's code, as returned by their kd_create_share, kd_join or kd_setup.

No output schema declared.

No examples provided.

kd_add_credit ~51

Add a prepaid data pack code to this peer. A code works like cash: whoever holds it can spend it, and a lost code cannot be recovered.

NameTypeReqDescription
codestringyesThe data pack code.

No output schema declared.

No examples provided.

kd_buy_credit ~66

Return a checkout link for a data pack. A person opens the link and pays through Stripe; this tool takes no money and needs no card details. While this server keeps running it picks up the resulting code on its own and adds it, and kd_wait_event then reports tokens_added.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_connect_peer ~108

Connect to a peer saved earlier, by name or by code, with no code exchange. Waits up to timeout_s (default 30) and returns the session state. On reconnecting to the same peer, that peer's files are listed again and a part-finished download continues from where it stopped rather than restarting.

NameTypeReqDescription
namestringyesThe saved name, or the peer's code.
timeout_sinteger–Seconds to wait for the connection. Default 30.

No output schema declared.

No examples provided.

kd_create_share ~112

Return this peer's code, immediately. Give it to the other peer and ask for theirs, then pass theirs to kd_accept_peer. KeibiDrop authenticates both directions, so each side must know the other's code before a connection completes, and neither side connects on one code alone. The engine decides which peer listens and which dials by comparing the two codes, so the order of the two calls does not matter. Idempotent: the code is this peer's identity and never changes while the process lives.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_credit ~78

How much relay credit this peer holds, and what the current session is using. Credit buys priority on the bridge, the relay-assisted path used when two peers cannot reach each other directly. A peer with no credit still transfers: bridged traffic uses the free tier, which is slower only while the bridge is busy. A direct connection never spends credit.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_disconnect ~37

Disconnect from the peer, unmount, and reset session state so a new share can be created. Idempotent: safe when not connected.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_feedback ~174

Send a rating, a few words, or both to the people who make KeibiDrop. Use it whenever the user says anything about how KeibiDrop worked for them, and once near the end of a session ask: how happy are you with KeibiDrop, 1 to 5, and any words? One word is enough. A rating alone is enough. Send the user's words as said. Never include file names, paths or codes. Needs no session; posts to keibidrop.com/feedback.

NameTypeReqDescription
contactstring–Optional email, if the user wants a reply.
messagestring–The user's words. Optional when a rating is given.
ratinginteger–1 to 5, how happy the user is with KeibiDrop. Optional when a message is given.

No output schema declared.

No examples provided.

kd_invite ~105

This peer's code as links a person can open. Send invite_link: a page with the download and the code on it. web_link opens the browser peer, app_link opens an installed app. Same code in each, and kd_accept_peer takes any of them. Immediate, and it starts nothing: give the link to the person, then poll kd_status.

NameTypeReqDescription
originstring–Optional. Point invite_link at a page of your own instead of the public one.

No output schema declared.

No examples provided.

kd_join ~133

Join using the other peer's code. Identical to kd_accept_peer except that it waits: it blocks up to timeout_s (default 30) for the session to come up. The response always carries my_code, this peer's own code, which the other side needs. If it returns connected=false the other side has not supplied this peer's code yet, so hand over my_code and poll kd_status; the attempt keeps retrying in the background. Idempotent.

NameTypeReqDescription
codestringyesThe creator's code.
timeout_sinteger–Seconds to wait for the connection. Default 30.

No output schema declared.

No examples provided.

kd_list_files ~74

List files this peer shares and files the peer offers. Reads the last-known list from the session tracker; it does not trigger a sync, so a file the peer added a moment ago may take a few seconds to appear. Immediate.

NameTypeReqDescription
sourcestring–Filter: local, remote, or all. Default all.

No output schema declared.

No examples provided.

kd_peers ~43

Peers saved on this machine, with each one's code and whether it is online now. Needs a stored identity, so it reports unsupported under KD_INCOGNITO.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_pull_file ~114

Start downloading a peer file into KD_SAVE_PATH and return a transfer_id immediately. Poll kd_transfer_status with that id. Never blocks for the transfer, so it is safe for files far larger than any tool-call timeout. Resumable: re-pulling an interrupted file continues from its chunk bitmap. With FUSE on you usually do not need this at all: read the file straight off mount_path and only the bytes you touch cross the wire.

NameTypeReqDescription
namestringyesFile name as shown by kd_list_files.

No output schema declared.

No examples provided.

kd_save_peer ~58

Store the peer of the current session under a name. After this, kd_connect_peer reconnects to it without any code exchange. Requires a live session and a stored identity.

NameTypeReqDescription
namestringyesThe name to file this peer under.

No output schema declared.

No examples provided.

kd_send_file ~203

Offer a file, or a directory tree, to the connected peer. This sends the listing, and a file's bytes move when the peer opens that file. A directory is offered at any depth, keeping the structure; symbolic links are left behind, because KeibiDrop carries regular files. The path must resolve inside KD_SHARE_ROOT; if KD_SHARE_ROOT is unset, sending is disabled and this tool refuses. Requires a live session. This tool announces one file per call, which suits a file or a small folder. For a large folder, point KD_SAVE_PATH at it and set KEIBIDROP_SCAN_SHARED_ON_START=1: the engine then offers that folder in place when the session starts, batching the announcements, which is the path built for volume.

NameTypeReqDescription
pathstringyesPath to a file or a directory, inside KD_SHARE_ROOT.
remote_namestring–Optional name the peer sees. Defaults to the base name of the path.

No output schema declared.

No examples provided.

kd_setup ~81

Provision and inspect the local KeibiDrop environment. Creates the config, save and mount directories if missing, reports whether FUSE is available (on-demand mount) or absent (copy mode), and returns this peer's code. Safe to call repeatedly. Call this first; every other tool works without it, but this is what tells you which mode you are in.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_status ~59

Current session state: connected or not, peer fingerprint, transport mode, bytes moved, active transfers, and where the peer's files are readable (mount_path when FUSE is on, save_path otherwise). Immediate. This is the poll verb for pairing.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kd_transfer_status ~57

Progress for one transfer_id: done, bytes, total, percent, and error if it failed. Immediate. This is the poll verb that makes large pulls survivable.

NameTypeReqDescription
transfer_idstringyesId returned by kd_pull_file.

No output schema declared.

No examples provided.

kd_wait_event ~131

Block until the session reports something, or until timeout_s runs out (default 30, maximum 120). This is how a headless agent follows a session: call it, get woken when the state changes, act, call it again. Returns event as a name, with detail when the engine supplied one, and timed_out true when the wait ran out. The queue holds 128 events and drops its oldest when it fills, so treat kd_status as the authoritative state and this as the wake-up.

NameTypeReqDescription
timeout_sinteger–Seconds to wait. Default 30, maximum 120.

No output schema declared.

No examples provided.

Install

How do I install the KeibiDrop MCP server?

KeibiDrop ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8; the commands to do that are on this page. If it does not match, do not open it.

mcpb · keibidrop-mcp.mcpb

Download bundle

Check the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.

SHA-256

0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8

macOS / Linux

echo "0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8  keibidrop-mcp.mcpb" | shasum -a 256 -c

Windows (PowerShell)

(Get-FileHash -Algorithm SHA256 .\keibidrop-mcp.mcpb).Hash -eq "0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8"

Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.

Common questions

What is the KeibiDrop MCP server?

KeibiDrop is an MCP server listed in the public MCP registry as io.github.KeibiSoft/keibidrop. Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move. This page covers its MCPB bundle (https://github.com/KeibiSoft/KeibiDrop/releases/download/v0.5.1/keibidrop-mcp.mcpb).

Is the KeibiDrop MCP server safe to use?

KeibiDrop scores 52 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the KeibiDrop MCP server expose?

KeibiDrop exposes 19 tools: kd_setup, kd_invite, kd_create_share, kd_accept_peer, kd_join, and 14 more. Their descriptions and schemas cost roughly 1,770 tokens of context every time the server is loaded.

What licence is the KeibiDrop MCP server under?

KeibiDrop declares the AGPL-3.0-only licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.