qURL
Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents.
Topics: Security
Connect
Review any command before running it. Package names and URLs come from the server's own registry entry.
Package (npm 0.5.0)
npx -y @layervai/[email protected]
Or add to your MCP client config:
{
"mcpServers": {
"qurl-mcp": {
"command": "npx",
"args": [
"-y",
"@layervai/[email protected]"
],
"env": {
"QURL_API_KEY": "<YOUR_VALUE>",
"QURL_API_URL": "<YOUR_VALUE>",
"QURL_CONNECTOR_URL": "<YOUR_VALUE>",
"QURL_MCP_CONFIG": "<YOUR_VALUE>",
"MCP_MAX_UPLOAD_FILE_DATA_BYTES": "<YOUR_VALUE>",
"QURL_SMTP_HOST": "<YOUR_VALUE>",
"QURL_SMTP_PORT": "<YOUR_VALUE>",
"QURL_SMTP_SECURE": "<YOUR_VALUE>",
"QURL_SMTP_USERNAME": "<YOUR_VALUE>",
"QURL_SMTP_PASSWORD": "<YOUR_VALUE>",
"QURL_SMTP_FROM_EMAIL": "<YOUR_VALUE>",
"QURL_SMTP_FROM_NAME": "<YOUR_VALUE>",
"QURL_SMTP_ALLOWED_RECIPIENTS": "<YOUR_VALUE>",
"QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS": "<YOUR_VALUE>",
"QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE": "<YOUR_VALUE>",
"QURL_SMTP_MAX_RECIPIENTS_PER_HOUR": "<YOUR_VALUE>"
}
}
}
}
QURL_API_KEYrequired secret — API key for the qURL API with qurl:read, qurl:write, and/or qurl:resolve scopes. Obtain from https://layerv.ai.QURL_API_URL— qURL API base URL. Defaults to https://api.layerv.ai. Override only for testing against a non-production qURL backend.QURL_CONNECTOR_URL— Connector base URL used by local-file, file-data, and text-to-PDF upload tools before minting a qURL.QURL_MCP_CONFIG— Optional path to a shared qURL MCP config file. Both stdio and HTTP modes can read SMTP, connector, and default API settings from this file.MCP_MAX_UPLOAD_FILE_DATA_BYTES— Maximum decoded/local upload size. Accepts bytes or units such as 10mb; capped at 100mb.QURL_SMTP_HOST— SMTP hostname for optional qURL link delivery.QURL_SMTP_PORT— SMTP port for optional qURL link delivery.QURL_SMTP_SECURE— Whether SMTP uses an implicit TLS connection (true/false).QURL_SMTP_USERNAMEsecret — SMTP authentication username.QURL_SMTP_PASSWORDsecret — SMTP authentication password or app-specific credential.QURL_SMTP_FROM_EMAIL— Validated sender email address for qURL delivery.QURL_SMTP_FROM_NAME— Optional sender display name for qURL delivery.QURL_SMTP_ALLOWED_RECIPIENTS— Optional comma-separated exact recipient allowlist.QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS— Optional comma-separated recipient-domain allowlist.QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE— Maximum recipients in one delivery request (default 10).QURL_SMTP_MAX_RECIPIENTS_PER_HOUR— Maximum attempted recipients per qURL key per fixed hourly window (default 100).
Related servers
ida-pro-mcp
MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and…
GhidraMCP
A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling…
jadx-ai-mcp
JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live…
beelzebub
Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious…
SafeDep Vet MCP
Protect your AI agents and IDEs from malicious open-source packages.
skylos
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
Listed in punkpeye/awesome-mcp-servers (MIT)
Data from the Official MCP Registry