zipnative MCP — ZIP creation, inspection, secure extraction & verification MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add zipnative-mcp -- npx -y zipnative-mcp

{
  "mcpServers": {
    "zipnative-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "zipnative-mcp"
      ]
    }
  }
}

[mcp_servers.zipnative-mcp]
command = "npx"
args = ["-y", "zipnative-mcp"]

{
  "mcpServers": {
    "zipnative-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "zipnative-mcp"
      ]
    }
  }
}

{
  "servers": {
    "zipnative-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "zipnative-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: ZIPNATIVE_MCP_OUTPUT_DIR (Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache)), ZIPNATIVE_MCP_CACHE_DIR (Opt-in content-addressed response cache directory (absolute path) (SHA-256 keyed, 1h TTL, 256 MiB, oldest-written evicted first, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue), ZIPNATIVE_MCP_PORT (Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set), ZIPNATIVE_MCP_HTTP_TOKEN (Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged), ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES (Operator ceiling for limits.maxEntryUncompressedSize, limits.maxTotalUncompressedSize and limits.maxEntryCompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED), ZIPNATIVE_MCP_MAX_ENTRIES (Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start), ZIPNATIVE_MCP_WORKERS (Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start), ZIPNATIVE_MCP_MAX_FILE_OUTPUT_BYTES (Operator ceiling for every file written in outputMode='file' (create_zip, modify_zip, canonicalize_zip, merge_zip, extract_zip, inflate_raw), enforced while streaming (default 4294967296 = 4 GiB, the 1.0.0 behaviour). Integer >= 1048576, read once at startup; an invalid value refuses to start. Raise it to write Zip64 archives above 4 GiB into the sandbox (create_zip stream entries with zip64: true)).