zipnative MCP — ZIP creation, inspection, secure extraction & verification

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.Nizoka/zipnative-mcp",
  "description": "ZIP MCP server: create, inspect, verify, extract securely, modify without recompression. 13 tools",
  "title": "zipnative MCP — ZIP creation, inspection, secure extraction & verification",
  "repository": {
    "url": "https://github.com/Nizoka/zipnative-mcp",
    "source": "github"
  },
  "version": "1.0.0",
  "websiteUrl": "https://github.com/Nizoka/zipnative-mcp#readme",
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "zipnative-mcp",
      "version": "1.0.0",
      "runtimeHint": "npx",
      "transport": {
        "type": "stdio"
      },
      "runtimeArguments": [
        {
          "value": "-y",
          "type": "positional",
          "valueHint": "skip-confirm"
        },
        {
          "value": "zipnative-mcp",
          "type": "positional",
          "valueHint": "package"
        }
      ],
      "environmentVariables": [
        {
          "description": "Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache).",
          "format": "filepath",
          "name": "ZIPNATIVE_MCP_OUTPUT_DIR"
        },
        {
          "description": "Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue.",
          "format": "filepath",
          "name": "ZIPNATIVE_MCP_CACHE_DIR"
        },
        {
          "description": "Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set.",
          "format": "number",
          "name": "ZIPNATIVE_MCP_PORT"
        },
        {
          "description": "Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged.",
          "isSecret": true,
          "name": "ZIPNATIVE_MCP_HTTP_TOKEN"
        },
        {
          "description": "Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED.",
          "format": "number",
          "name": "ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES"
        },
        {
          "description": "Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start.",
          "format": "number",
          "name": "ZIPNATIVE_MCP_MAX_ENTRIES"
        },
        {
          "description": "Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start.",
          "format": "number",
          "name": "ZIPNATIVE_MCP_WORKERS"
        }
      ]
    }
  ],
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "com.github": {
        "serverDisplayName": "zipnative MCP"
      },
      "io.github.nizoka.publisher": {
        "conformance": "ISO/IEC 21320-1 (veraZIP, CI-validated)",
        "engine": "zipnative@1.0.0",
        "keywords": [
          "zip",
          "unzip",
          "zip64",
          "archive",
          "compression",
          "deflate",
          "zip-slip",
          "zip-bomb",
          "secure-by-default",
          "deterministic",
          "reproducible-builds",
          "crc32",
          "epub",
          "jar",
          "ooxml",
          "vsix"
        ],
        "license": "MIT",
        "mcpProtocol": "2026-07-28",
        "network": "none",
        "promptCount": 7,
        "tool": "mcp-publisher",
        "toolCount": 13,
        "toolVersion": "1.7.9",
        "transports": [
          "stdio",
          "streamable-http"
        ]
      }
    }
  }
}