Zip Archive Create Extract Bomb Guard MCP Server

by theluckystrike Your server? Claim it

answering

Zip Archive Create Extract Bomb Guard is answering right now. Last checked 13 min ago. It exposes 12 tools. Last commit 9 Sep 2026.

Create, inspect and extract zip archives offline, with traversal, symlink and zip-bomb guards.

Uptime history 6 days of history

6 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

196 ms

Response time

average over 24h

Stars

last commit 9 Sep 2026

What changed 9

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 September 2026. No other catalogue keeps this.

10 Sep a tool description was rewritten license_activate

9 Sep 5 tool descriptions were rewritten7 times that day license_activate, license_status, zip_add and 2 more

9 Sep a tool changed the parameters it asks for license_activate

and 2 more, back to 9 September 2026

What the code does

We read the source, 15 h ago · tools taken from the live server · rules 3dff92dd89df

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Claims local-only, but ships network tools zip_delete_upload, zip_upload

заявлено «локально, без передачи данных», но есть zip_delete_upload

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Zip Archive Create Extract Bomb Guard and you get told the day something new turns up.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add zip-archive-create-extract-bomb-guard --transport http https://mcp.zovo.one/mcp/zip

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "zip-archive-create-extract-bomb-guard": {
      "url": "https://mcp.zovo.one/mcp/zip"
    }
  }
}

~/.codex/config.toml

[mcp_servers.zip-archive-create-extract-bomb-guard]
url = "https://mcp.zovo.one/mcp/zip"

.cursor/mcp.json

{
  "mcpServers": {
    "zip-archive-create-extract-bomb-guard": {
      "url": "https://mcp.zovo.one/mcp/zip"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "zip-archive-create-extract-bomb-guard": {
      "url": "https://mcp.zovo.one/mcp/zip"
    }
  }
}

Available tools 12

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

zip

zip_add

Call this tool to add files to an existing archive under their own names, or under prefix. A name clash is refused unless replace. An archive holding unsafe entries is refused rather than rewritten.

zip_bundle_month

Local (stdio) install only. On this hosted endpoint /mcp/invoice, /mcp/quotes, /mcp/expense-tracker, /mcp/docx and /mcp/resume return their documents as one-hour download links and keep no output folder to read, so there is nothing for this tool to bundle. Pack the files with zip_upload plus zip_create instead.

zip_create

Call this tool to pack files uploaded with zip_upload into a new .zip and get a download link valid for one hour. Entry names are always relative, so the archive cannot write outside where it is unpacked.

zip_delete_upload

Delete one uploaded file stored for your token. The register rows zip_history lists are kept.

zip_extract

Call this tool to unpack an archive; every entry comes back as its own download link valid for one hour. Traversal, absolute-path and symlink entries are refused, a size and ratio cap stops a zip bomb, and dry_run reports exactly what would be written.

zip_extract_text

Call this tool to read one text entry out of an archive without unpacking anything: give the entry name and the text comes back inline. Binary entries are refused by name rather than printed as noise.

zip_files

List the files stored for your token on this endpoint, with their sizes. These are the names every path argument here resolves against.

zip_history

List the archives created for your token, newest first, with entry counts, sizes and names, plus how much of the free 20 a month is used. Each download link expires after an hour; the row keeps the name.

zip_list

Call this tool to list an archive's entries with sizes and ratios and flag what is dangerous: absolute paths, .., symlinks, encrypted entries, duplicate names and bombs. Read-only. Run it before zip_extract.

zip_upload

Send a file to this hosted endpoint. There is no filesystem here, so instead of a path you upload the file once with zip_upload and then pass its name wherever a path is asked for: an archive to zip_list, zip_extract, zip_extract_text or zip_add, a plain file to zip_create. Give exactly one of content_base64 (the file's bytes, the only paste form an archive can take), content (text, for a text file to pack) or url. url: fetch a public file instead of pasting base64 (recommended above about 10 KB): the url is fetched here with a 10 second timeout, at most 3 redirects, public http(s) hosts only, and a 1 MB cap, and a name ending .zip is checked for the PK magic before anything is stored. Uploads are kept for your token between calls; zip_files lists them and zip_delete_upload removes one. The request body cap is 256 KB, so the practical ceiling on a paste is about 190 KB of file once it is base64 inside a JSON-RPC envelope.

license

license_activate

Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong or expired key changes nothing. license_status confirms it.

license_status

Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a free-tier refusal. No arguments, nothing changes.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.zovo.one/mcp/zip	streamable-http	answering	163 ms	13 min ago

Alternatives to Zip Archive Create Extract Bomb Guard

same job, measured the same way

Zip Archive Create Extract Bomb Guard — questions

Answers built from our own checks of this server.

What can Zip Archive Create Extract Bomb Guard do?

It exposes 12 tools, read directly from the server on our last check. Among them: license_activate, license_status, zip_add, zip_bundle_month, zip_create, zip_delete_upload and 6 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is Zip Archive Create Extract Bomb Guard mostly used for?

Its tools cluster around zip and license. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is Zip Archive Create Extract Bomb Guard working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 196 ms. The bar chart above shows every period we have measured.

How do I connect Zip Archive Create Extract Bomb Guard?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Zip Archive Create Extract Bomb Guard need an API key?

No. Zip Archive Create Extract Bomb Guard completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 12 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Zip Archive Create Extract Bomb Guard?

It answers our handshake in 196 ms on average, which is faster than 68% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Zip Archive Create Extract Bomb Guard open source?

Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.