# Snip (remote · snip.link)

Free QR codes that never expire and free short links with click stats.

- Trust score: 71/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `snip.link`: 71/100 (this document), [markdown](https://verifymcp.io/servers/link-snip-snip/snip.md), [page](https://verifymcp.io/servers/link-snip-snip/snip)

## Channel facts

- Endpoint: `https://snip.link/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (delete_link).
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 60/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 3843 tokens (~320/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 50/100
  - Stability observed for 15 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 99/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 98% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the Snip MCP server?

Snip is a hosted endpoint at https://snip.link/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http link-snip-snip 'https://snip.link/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "link-snip-snip": {
      "url": "https://snip.link/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "link-snip-snip": {
      "type": "http",
      "url": "https://snip.link/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.link-snip-snip]
url = "https://snip.link/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "link-snip-snip": {
      "type": "remote",
      "url": "https://snip.link/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add link-snip-snip --url 'https://snip.link/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  link-snip-snip:
    url: "https://snip.link/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "link-snip-snip": {
      "Transport": "http",
      "Url": "https://snip.link/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add link-snip-snip -t streamable-http -u 'https://snip.link/mcp'
```

### Other

```json
{
  "mcpServers": {
    "link-snip-snip": {
      "type": "http",
      "url": "https://snip.link/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 71, 0)

- [security] Tool “delete_link” rewrote its description, which is the text the model reads
- [security] Tool “list_domains” rewrote its description, which is the text the model reads
- [security] Tool “shorten_link” rewrote its description, which is the text the model reads
- [cosmetic] “delete_link” reworded the description of “link”
- [cosmetic] “get_link_stats” reworded the description of “link”
- [cosmetic] “shorten_link” reworded the description of “ending”
- [cosmetic] “update_link” reworded the description of “link”

### 2026-11-04 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-31 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-29 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-28 (score 67, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “make_qr_code” rewrote its description, which is the text the model reads
- [security] Tool “save_collection” rewrote its description, which is the text the model reads
- [security] Tool “save_page” rewrote its description, which is the text the model reads
- [security] Tool “delete_link” rewrote its description, which is the text the model reads
- [security] Tool “get_account_stats” rewrote its description, which is the text the model reads
- [security] Tool “get_link_stats” rewrote its description, which is the text the model reads
- [security] Tool “list_collections” rewrote its description, which is the text the model reads
- [security] Tool “list_domains” rewrote its description, which is the text the model reads
- [security] Tool “list_links” rewrote its description, which is the text the model reads
- [security] Tool “shorten_link” rewrote its description, which is the text the model reads
- [security] Tool “update_link” rewrote its description, which is the text the model reads
- [cosmetic] “shorten_link” reworded the description of “ending”
- [cosmetic] “shorten_link” reworded the description of “routes”
- [cosmetic] “shorten_link” reworded the description of “title”
- [cosmetic] “update_link” reworded the description of “routes”
- [cosmetic] “update_link” reworded the description of “watch”

### 2026-10-27 (score 67, 0)

- [security] Tool “save_page” rewrote its description, which is the text the model reads
- [security] Tool “shorten_link” rewrote its description, which is the text the model reads
- [cosmetic] “save_page” added an optional parameter “presets”
- [cosmetic] “shorten_link” added an optional parameter “expires_in_days”
- [cosmetic] “shorten_link” added an optional parameter “forward_query”
- [cosmetic] “shorten_link” added an optional parameter “presets”
- [cosmetic] “shorten_link” added an optional parameter “preview”
- [cosmetic] “shorten_link” added an optional parameter “qr_style”
- [cosmetic] “shorten_link” added an optional parameter “snapshots”
- [cosmetic] “shorten_link” added an optional parameter “stats_public”
- [cosmetic] “shorten_link” added an optional parameter “track”
- [cosmetic] “save_page” reworded the description of “fresh”

### 2026-10-26 (score 67, +1)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “drop_file” rewrote its description, which is the text the model reads
- [security] Tool “list_links” rewrote its description, which is the text the model reads
- [cosmetic] “list_links” added an optional parameter “cursor”

## MCP tools (12)

### `make_qr_code` (~264 tokens)

Make a QR code

Make a static QR code for a link, text, Wi-Fi network, contact card, email, phone number or SMS, free and with no account. Returns a PNG and an SVG download link that the user can open, save or print; show the PNG link to the user. Static codes hold the content in the pattern, so they never expire and keep working without Snip.link. Use this whenever the user asks for a QR code.

Input parameters:

- `bg` (string): Background colour, #rrggbb. Default #ffffff.
- `data` (string, required): What the QR code holds: a web address, plain text, a WIFI:T:WPA;S:<name>;P:<password>;; string, a vCard, mailto:, tel: or sms:. For a link the user may want to change or track later, call shorten_lin…
- `ecc` (string): Error correction: L 7%, M 15% (default), Q 25%, H 30% of the code can be damaged and still scan.
- `fg` (string): Dark colour, #rrggbb, for example #111111. Default #111111.
- `style` (string): Dot shape. Default rounded.

### `shorten_link` (~739 tokens)

Shorten a link

Turn a long web address into a short snip.link link, free, and get a QR code for it. Use this when the user wants a short link, a link they can change after printing, click and scan counts, or a YouTube, Spotify or Amazon link that opens the app when tapped inside Instagram, TikTok or Facebook (every Snip.link link does that on its own). When the user is not signed in to Snip.link the link works at once and the answer includes a claim link the user can open to keep it in a free Snip.link account and see its clicks. When they are signed in (the account endpoint or an API key) the link is saved to their account, and a custom ending (go.snip.link/your-ending) is allowed.

Input parameters:

- `domain` (string): One of the user's own live domains (go.yourbrand.com, see list_domains) to put the link on instead of snip.link. Needs the user signed in on a plan with own domains.
- `ending` (string): Custom ending for go.snip.link/<ending>, also available at snip.link/r/<ending>: 3 to 40 ASCII letters, digits, dashes or underscores, with no spaces. Free with a Snip.link account. Omit or send an e…
- `expires_in_days` (integer|null): Expiry from creation; null means no expiry.
- `forward_query` (boolean): Override query-parameter forwarding.
- `presets` (array): Owned Library ids, one per kind. Omit for account defaults; [] skips Library defaults. Explicit link settings win.
- `preview` (object|null): Social preview; null clears a Library preview.
- `qr_style` (object|null): QR settings; null clears a Library QR style.
- `routes` (array): Rules that send some visits elsewhere, tried in order; the first match wins and everyone else goes to url. Free with a Snip.link account. Each rule: conditions joined by when (all or any) and its own…
- `snapshots` (string)
- `stats_public` (boolean): Whether aggregate stats are public. Explicit false overrides a saved template.
- `title` (string): A name for the link in the user's dashboard. Needs the user signed in to Snip.link.
- `track` (boolean): Override the default for visit tracking.
- `url` (string, required): The http or https address to shorten.

### `save_page` (~226 tokens)

Save and read a web page

Read a public web page as clean Markdown and save a copy, subject to retention and access settings. Returns the page's text, a short link, QR code and saved-format URLs (.md, .txt, .jpg, .pdf, .mhtml). Successful public copies also return archive_url for the exact version and cite with APA 7, MLA 9, Chicago and BibTeX citations preserving the original source. Those fields are null until a public copy is available. Saving a page does not verify its claims. No account is required. A page saved in the last day may be reused; pass fresh for a new capture.

Input parameters:

- `formats` (array): Only these formats (faster for just the text). Default: all of them.
- `fresh` (boolean): Load the page again even if it was saved in the last day. Default false.
- `presets` (array): Owned Library ids, one per kind. Omit for account defaults; [] skips Library defaults. Explicit link settings win.
- `url` (string, required): The http or https page to save.

### `drop_file` (~306 tokens)

Share a file with a short link

Put a file on the web and get a short snip.link link to it, free. Send text (a note, Markdown, CSV, JSON, code) as `content`, or any other file (a PDF, a picture, a document) as `content_base64`, with its file name. The link opens a page that shows the file with a download button and a QR code; the link with the file's extension is the file itself, and file.formats lists its available conversion URLs. Supported pairs, MIME types and fidelity notes are at https://snip.link/convert/formats.json; outputs depend on the file and engine limits. A pending conversion returns 202 with Retry-After. Files are at most 10 MB through this tool; use the REST API for larger files. Use this when the user wants to share, send, publish, host or link to a file, or wants something you wrote available as a link or a QR code. Files shared without an account stay up for 30 days unless the user keeps them with a free account.

Input parameters:

- `content` (string): The file's text, for text files.
- `content_base64` (string): The file's bytes in base64, for anything else.
- `name` (string, required): The file name with its extension, which decides how it is shown: notes.md, prices.csv, photo.png.
- `title` (string): A title for the user's dashboard (signed in only).

### `get_link_stats` (~184 tokens)

Get link stats

Clicks and QR scans for one of the user's own Snip.link links: totals, by day, by hour of the day on plans with time-of-day analytics, and the top countries, referring sites and devices. Needs the user signed in to Snip.link (the account endpoint or an API key). Pass the short link, its ending or its id. For every link at once, use get_account_stats.

Input parameters:

- `days` (integer): How many days back, up to the plan's limit (30 on Free, a year on Pro). Default 30.
- `link` (string, required): The full short URL (https://go.snip.link/abc123 or https://snip.link/r/abc123), its ending (abc123) or its id. Full URLs are scoped to their host; they never select a same-ending link on another doma…

### `get_account_stats` (~127 tokens)

Get account stats

Clicks and QR scans across every link in the user's Snip.link account: totals, by day, the busiest links, and the top countries, referring sites and devices. Needs the user signed in to Snip.link. Use this for questions like "how are my links doing" or "which link got the most scans this week".

Input parameters:

- `days` (integer): How many days back, up to the plan's limit (30 on Free, a year on Pro). Default 30.
- `links` (integer): How many of the busiest links to list. Default 10.

### `list_links` (~119 tokens)

List links

The user's Snip.link links, newest first, with their destinations and click counts. Needs the user signed in to Snip.link. Pass a search to match an ending, a destination or a title. To continue, pass the answer's next_cursor as cursor with the same search.

Input parameters:

- `cursor` (string): The previous answer's next_cursor, for the next page with the same search.
- `limit` (integer): How many to return. Default 20.
- `search` (string): Text to match against the ending, destination and title.

### `update_link` (~836 tokens)

Update a link

Changes the ending, destination, title, rules, schedule (go-live time, expiry, click limit) or link preview (the title, line and picture chat apps and social sites show when the link is pasted) of one of the user's Snip.link links, switches it off and on, or watches its page for changes. Custom endings and renaming are free with an account. Previous short URLs and printed QR codes keep working, follow the latest destination and share the same analytics until the link is disabled or deleted. A link keeps up to 20 previous endings. Needs the user signed in to Snip.link. Pass only the fields to change.

Input parameters:

- `disabled` (boolean): True switches the link off (it answers 404); false switches it back on.
- `ending` (string): The new ending: 3 to 40 ASCII letters, digits, dashes or underscores, with no spaces. Reusing this link's previous ending or changing only its case does not use another previous-ending slot.
- `expires_at` (string|null): When the link stops working, as an ISO date and time. After it, visits see an expired page. null: never.
- `link` (string, required): The full short URL (https://go.snip.link/abc123 or https://snip.link/r/abc123), its ending (abc123) or its id. Full URLs are scoped to their host; they never select a same-ending link on another doma…
- `max_clicks` (integer|null): Stop the link after this many counted visits in total (bots and repeat taps within a minute are not counted). null: no limit.
- `preview` (object|null): The link's own preview card for chats and posts. Any field left out shows the page's own. image is an https picture address or screenshot (the page's first screen). null removes it. Free on every pla…
- `routes` (array): Rules that send some visits elsewhere, tried in order; the first match wins and everyone else goes to url. Free with a Snip.link account. Each rule: conditions joined by when (all or any) and its own…
- `starts_at` (string|null): When the link goes live, as an ISO date and time (2026-11-01T09:00:00Z). Before it, visits see a not live yet page and are not counted. null: live now.
- `title` (string): A new name for the dashboard.
- `track` (boolean): false: only count visits, without recording when, where or on what device. true: record them.
- `url` (string): The new http or https destination.
- `watch` (string): Watch the destination page: Snip.link saves a fresh copy daily or weekly and emails the user what was added and what went when its words change. off stops. A paid plan feature; the error says which p…

### `delete_link` (~151 tokens)

Delete a link

Permanently deletes one of the user's Snip.link links and its click history; its current and previous short URLs stop working within a minute and its current and previous endings remain reserved indefinitely, including for the same account. There is no automatic release, restore or reuse operation. Needs the user signed in to Snip.link. Confirm with the user first; to pause every ending instead, use update_link with disabled true.

Input parameters:

- `link` (string, required): The full short URL (https://go.snip.link/abc123 or https://snip.link/r/abc123), its ending (abc123) or its id. Full URLs are scoped to their host; they never select a same-ending link on another doma…

### `list_domains` (~82 tokens)

List own domains

The user's own domains (go.yourbrand.com), their state, CNAME target and account-specific TXT ownership proof. Pass a live one as domain to shorten_link. New connections need both DNS records; an old CNAME alone does not prove control. Needs the user signed in to Snip.link; add domains in the dashboard or POST /v1/domains.

### `list_collections` (~67 tokens)

List collections

The user's Snip.link collections: links grouped by hand, each with how many links it holds and its public page (snip.link/c/<address>, one button per live link) when that is on. Needs the user signed in to Snip.link. Change one with save_collection.

### `save_collection` (~253 tokens)

Create or change a collection

Creates a collection of the user's Snip.link links, or changes one (pass collection, its id from list_collections): its name, the line under it, its links in order, and whether it has a public page at snip.link/c/<address> that shows one button per live link, link-in-bio style. links replaces the collection's links in that order; leave it out to keep them. Free on every plan; the links themselves never change. Needs the user signed in to Snip.link.

Input parameters:

- `collection` (string): The id of the collection to change. Leave it out to create one.
- `description` (string|null): One line under the name on the page. null removes it.
- `links` (array): The links in order, each by short URL, ending or id (see list_links). Replaces the collection's links.
- `name` (string): The collection's name, shown on its page.
- `public` (boolean): true switches the public page on, false off. Off by default.
- `slug` (string): The page's address after /c/: lowercase letters, digits and dashes. Left out, one is made from the name.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/link-snip-snip/snip#diagnostics

## Score history

- 2026-11-05: 71
- 2026-11-04: 71
- 2026-11-03: 70
- 2026-11-02: 70
- 2026-11-01: 69
- 2026-10-31: 69
- 2026-10-30: 68
- 2026-10-29: 68
- 2026-10-28: 67
- 2026-10-27: 67
- 2026-10-26: 67
- 2026-10-25: 66
- 2026-10-24: 66
- 2026-10-23: 67
- 2026-10-22: 66
- 2026-10-21: 66

## Common questions

### What is the Snip MCP server?

Snip is an MCP server listed in the public MCP registry as link.snip/snip. Free QR codes that never expire and free short links with click stats. This page covers its hosted endpoint (https://snip.link/mcp).

### Is the Snip MCP server safe to use?

Snip scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Snip MCP server expose?

Snip exposes 12 tools: make_qr_code, shorten_link, save_page, drop_file, get_link_stats, and 7 more. Their descriptions and schemas cost roughly 3,354 tokens of context every time the server is loaded.

### Does the Snip MCP server require authentication?

No. We connected to Snip without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Snip MCP server still maintained?

Snip is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://snip.link/mcp
- Website: https://snip.link/mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/link-snip-snip/snip.xml
- Changelog JSON feed: https://verifymcp.io/servers/link-snip-snip/snip.json
- HTML version of this page: https://verifymcp.io/servers/link-snip-snip/snip