KeibiDrop
MCPB · KEIBIDROP-MCP.MCPB
Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move.
Available components
Last scanned (6 hours ago)
Scores higher than 84% of MCPB servers
Category Documents and Files
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (AGPL-3.0-only).Pass
- Actively maintained (last published 15 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability83
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2027 tokens (~106/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
- Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "kd_send_file" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −3
- Stability: pass → 0.80 functional
- 30 Oct 26 0
- Stability: 0.97 → pass security
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 23 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed mcpb/https://github.com/KeibiSoft/KeibiDrop/releases/download/v0.5.1/keibidrop-mcp.mcpb
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | mcpb |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
kd_accept_peer Accept the joining peer's code ~86
Supply the other peer's code and start connecting. Returns immediately; the connection is established in the background, so poll kd_status until connected is true. Safe to call before the other peer has called anything: it retries for several minutes. Idempotent.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | The other peer's code, as returned by their kd_create_share, kd_join or kd_setup. |
No output schema declared.
No examples provided.
kd_add_credit Add a data pack code ~51
Add a prepaid data pack code to this peer. A code works like cash: whoever holds it can spend it, and a lost code cannot be recovered.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | The data pack code. |
No output schema declared.
No examples provided.
kd_buy_credit Get a link to buy a data pack ~66
Return a checkout link for a data pack. A person opens the link and pays through Stripe; this tool takes no money and needs no card details. While this server keeps running it picks up the resulting code on its own and adds it, and kd_wait_event then reports tokens_added.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_connect_peer Reconnect to a saved peer ~108
Connect to a peer saved earlier, by name or by code, with no code exchange. Waits up to timeout_s (default 30) and returns the session state. On reconnecting to the same peer, that peer's files are listed again and a part-finished download continues from where it stopped rather than restarting.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The saved name, or the peer's code. |
| timeout_s | integer | – | Seconds to wait for the connection. Default 30. |
No output schema declared.
No examples provided.
kd_create_share Create a share and wait for a peer ~112
Return this peer's code, immediately. Give it to the other peer and ask for theirs, then pass theirs to kd_accept_peer. KeibiDrop authenticates both directions, so each side must know the other's code before a connection completes, and neither side connects on one code alone. The engine decides which peer listens and which dials by comparing the two codes, so the order of the two calls does not matter. Idempotent: the code is this peer's identity and never changes while the process lives.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_credit Relay credit ~78
How much relay credit this peer holds, and what the current session is using. Credit buys priority on the bridge, the relay-assisted path used when two peers cannot reach each other directly. A peer with no credit still transfers: bridged traffic uses the free tier, which is slower only while the bridge is busy. A direct connection never spends credit.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_disconnect End the session ~37
Disconnect from the peer, unmount, and reset session state so a new share can be created. Idempotent: safe when not connected.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_feedback Tell the KeibiDrop developers how it went ~174
Send a rating, a few words, or both to the people who make KeibiDrop. Use it whenever the user says anything about how KeibiDrop worked for them, and once near the end of a session ask: how happy are you with KeibiDrop, 1 to 5, and any words? One word is enough. A rating alone is enough. Send the user's words as said. Never include file names, paths or codes. Needs no session; posts to keibidrop.com/feedback.
| Name | Type | Req | Description |
|---|---|---|---|
| contact | string | – | Optional email, if the user wants a reply. |
| message | string | – | The user's words. Optional when a rating is given. |
| rating | integer | – | 1 to 5, how happy the user is with KeibiDrop. Optional when a message is given. |
No output schema declared.
No examples provided.
kd_invite Invite link for this peer ~105
This peer's code as links a person can open. Send invite_link: a page with the download and the code on it. web_link opens the browser peer, app_link opens an installed app. Same code in each, and kd_accept_peer takes any of them. Immediate, and it starts nothing: give the link to the person, then poll kd_status.
| Name | Type | Req | Description |
|---|---|---|---|
| origin | string | – | Optional. Point invite_link at a page of your own instead of the public one. |
No output schema declared.
No examples provided.
kd_join Join a peer's share ~133
Join using the other peer's code. Identical to kd_accept_peer except that it waits: it blocks up to timeout_s (default 30) for the session to come up. The response always carries my_code, this peer's own code, which the other side needs. If it returns connected=false the other side has not supplied this peer's code yet, so hand over my_code and poll kd_status; the attempt keeps retrying in the background. Idempotent.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | The creator's code. |
| timeout_s | integer | – | Seconds to wait for the connection. Default 30. |
No output schema declared.
No examples provided.
kd_list_files List files in the session ~74
List files this peer shares and files the peer offers. Reads the last-known list from the session tracker; it does not trigger a sync, so a file the peer added a moment ago may take a few seconds to appear. Immediate.
| Name | Type | Req | Description |
|---|---|---|---|
| source | string | – | Filter: local, remote, or all. Default all. |
No output schema declared.
No examples provided.
kd_peers List saved peers ~43
Peers saved on this machine, with each one's code and whether it is online now. Needs a stored identity, so it reports unsupported under KD_INCOGNITO.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_pull_file Download a file from the peer ~114
Start downloading a peer file into KD_SAVE_PATH and return a transfer_id immediately. Poll kd_transfer_status with that id. Never blocks for the transfer, so it is safe for files far larger than any tool-call timeout. Resumable: re-pulling an interrupted file continues from its chunk bitmap. With FUSE on you usually do not need this at all: read the file straight off mount_path and only the bytes you touch cross the wire.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | File name as shown by kd_list_files. |
No output schema declared.
No examples provided.
kd_save_peer Save the connected peer ~58
Store the peer of the current session under a name. After this, kd_connect_peer reconnects to it without any code exchange. Requires a live session and a stored identity.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The name to file this peer under. |
No output schema declared.
No examples provided.
kd_send_file Offer a file to the peer ~203
Offer a file, or a directory tree, to the connected peer. This sends the listing, and a file's bytes move when the peer opens that file. A directory is offered at any depth, keeping the structure; symbolic links are left behind, because KeibiDrop carries regular files. The path must resolve inside KD_SHARE_ROOT; if KD_SHARE_ROOT is unset, sending is disabled and this tool refuses. Requires a live session. This tool announces one file per call, which suits a file or a small folder. For a large folder, point KD_SAVE_PATH at it and set KEIBIDROP_SCAN_SHARED_ON_START=1: the engine then offers that folder in place when the session starts, batching the announcements, which is the path built for volume.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Path to a file or a directory, inside KD_SHARE_ROOT. |
| remote_name | string | – | Optional name the peer sees. Defaults to the base name of the path. |
No output schema declared.
No examples provided.
kd_setup Prepare this machine ~81
Provision and inspect the local KeibiDrop environment. Creates the config, save and mount directories if missing, reports whether FUSE is available (on-demand mount) or absent (copy mode), and returns this peer's code. Safe to call repeatedly. Call this first; every other tool works without it, but this is what tells you which mode you are in.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_status Session status ~59
Current session state: connected or not, peer fingerprint, transport mode, bytes moved, active transfers, and where the peer's files are readable (mount_path when FUSE is on, save_path otherwise). Immediate. This is the poll verb for pairing.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kd_transfer_status Poll a transfer ~57
Progress for one transfer_id: done, bytes, total, percent, and error if it failed. Immediate. This is the poll verb that makes large pulls survivable.
| Name | Type | Req | Description |
|---|---|---|---|
| transfer_id | string | yes | Id returned by kd_pull_file. |
No output schema declared.
No examples provided.
kd_wait_event Wait for the next session event ~131
Block until the session reports something, or until timeout_s runs out (default 30, maximum 120). This is how a headless agent follows a session: call it, get woken when the state changes, act, call it again. Returns event as a name, with detail when the engine supplied one, and timed_out true when the wait ran out. The queue holds 128 events and drops its oldest when it fills, so treat kd_status as the authoritative state and this as the wake-up.
| Name | Type | Req | Description |
|---|---|---|---|
| timeout_s | integer | – | Seconds to wait. Default 30, maximum 120. |
No output schema declared.
No examples provided.
How do I install the KeibiDrop MCP server?
KeibiDrop ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8; the commands to do that are on this page. If it does not match, do not open it.
mcpb · keibidrop-mcp.mcpb
Download bundleCheck the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.
SHA-256
0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8
macOS / Linux
echo "0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8 keibidrop-mcp.mcpb" | shasum -a 256 -c
Windows (PowerShell)
(Get-FileHash -Algorithm SHA256 .\keibidrop-mcp.mcpb).Hash -eq "0f4cd22f3ed0fe77b6cce9c2cdb6da332b9249c912a35e07a209297ea0611ec8"
Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.
What is the KeibiDrop MCP server?
KeibiDrop is an MCP server listed in the public MCP registry as io.github.KeibiSoft/keibidrop. Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move. This page covers its MCPB bundle (https://github.com/KeibiSoft/KeibiDrop/releases/download/v0.5.1/keibidrop-mcp.mcpb).
Is the KeibiDrop MCP server safe to use?
KeibiDrop scores 52 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the KeibiDrop MCP server expose?
KeibiDrop exposes 19 tools: kd_setup, kd_invite, kd_create_share, kd_accept_peer, kd_join, and 14 more. Their descriptions and schemas cost roughly 1,770 tokens of context every time the server is loaded.
What licence is the KeibiDrop MCP server under?
KeibiDrop declares the AGPL-3.0-only licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.