io.github.theluckystrike/zip-archive-create-extract-bomb-guard

up checked 2026-11-11T05:39:20.035Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

McpStamp Zip Archives

Publisher-provided description

Create zip archives, list their contents with safety flags, and extract without unsafe entries.

Summary by lookupd

Creates, lists and safely extracts zip archives, flagging unsafe entries like traversal paths and symlinks before unpacking files.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http zip-archive-create-extract-bomb-guard https://mcp.zovo.one/mcp/zip

Codex, remote (streamable-http)

codex mcp add zip-archive-create-extract-bomb-guard --url https://mcp.zovo.one/mcp/zip

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "zip-archive-create-extract-bomb-guard": {
      "url": "https://mcp.zovo.one/mcp/zip"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (12 tools)

Publisher-provided text

• license_status Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a fr
• license_activate Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong
• zip_upload Send a file to this hosted endpoint. There is no filesystem here, so instead of a path you upload the file once with zip_upload and then pass its name wherever
• zip_files List the files stored for your token on this endpoint, with their sizes. These are the names every path argument here resolves against.
• zip_delete_upload Delete one uploaded file stored for your token. The register rows zip_history lists are kept.
• zip_create Call this tool to pack files uploaded with zip_upload into a new .zip and get a download link valid for one hour. Entry names are always relative, so the archiv
• zip_list Call this tool to list an archive's entries with sizes and ratios and flag what is dangerous: absolute paths, .., symlinks, encrypted entries, duplicate names a
• zip_extract Call this tool to unpack an archive; every entry comes back as its own download link valid for one hour. Traversal, absolute-path and symlink entries are refuse
• zip_add Call this tool to add files to an existing archive under their own names, or under prefix. A name clash is refused unless replace. An archive holding unsafe ent
• zip_extract_text Call this tool to read one text entry out of an archive without unpacking anything: give the entry name and the text comes back inline. Binary entries are refus
• zip_bundle_month Local (stdio) install only. On this hosted endpoint /mcp/invoice, /mcp/quotes, /mcp/expense-tracker, /mcp/docx and /mcp/resume return their documents as one-hou
• zip_history List the archives created for your token, newest first, with entry counts, sizes and names, plus how much of the free 20 a month is used. Each download link exp

Details

• Version: 0.23.0
• Transports: streamable-http, stdio
• Uptime (7 days): 100%
• Median latency: 213 ms
• First indexed: 2026-11-01T09:57:49.839Z
• Last seen in registry: 2026-11-02T03:17:22.766Z
• Repository: https://github.com/theluckystrike/mcp-servers
• Website: https://www.mcpstamp.com/servers/zip/

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.theluckystrike/zip-archive-create-extract-bomb-guard.svg)](https://lookupd.com/servers/io.github.theluckystrike/zip-archive-create-extract-bomb-guard)

• 62174 servers
• Last crawl: 2026-11-11T19:17:20.153Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp