Coolftp MCP server
io.github.anivdel/coolftp·v0.1.4Deploy a site to its SFTP/FTP host from a coding agent. Changed files only, undo, live checks.
0 stars365 downloads/wk
Reviews
Write oneNobody has reviewed Coolftp yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Coolftp tools (18, 7 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
coolftp_deletewrite actionDelete a remote file or directory. Refuses to delete the site root. The coolFTP app asks the user to approve when it is open. …
coolftp_deploywrite actionUpload the project's changed files to its web server. Runs the configured build first. Use dryRun to preview, delete to remove stale remote files, commit to git-commit before deploying. The result says whether the site verified as live; only call it live when verify.ok is true. Previous versions of changed files stay on the server so coolftp_undo can revert.
coolftp_diffPreview a deploy: which files would be added, changed or are stale on the server. Uploads nothing. Long lists are summarised by folder.
coolftp_downloadDownload a remote file or directory to a local path. …
coolftp_historyRecent deploys for a site, newest first, with git commit, which agent did it, whether the live checks passed, and whether it can be undone.
coolftp_initLink a project directory to a site by writing .coolftp.json. Do this once so later deploys need no site argument.
coolftp_lsList a remote directory. …
coolftp_mkdirwrite actionCreate a remote directory (and parents). …
coolftp_readRead a text file from the server (up to 512 KB). …
coolftp_renameRename or move a remote path. …
coolftp_rollbackwrite actionPut the server back to an earlier deploy's git commit. With no target, restores the previous commit that was live for this project. Requires git; for a quick revert of the last deploy without git use coolftp_undo. The coolFTP app asks the user to approve when it is open.
coolftp_sitesList the servers saved in coolFTP (name, host, protocol, remote root). Secrets are never returned.
coolftp_statCheck whether a remote path exists and get its type, size and date, without downloading it. …
coolftp_statusShow which site the current project deploys to, whether the coolFTP desktop app is running (calls route through it when it is), and live connections.
coolftp_undowrite actionPut back the previous versions the last deploy set aside on the server: overwritten files are restored, files it added are removed, files it deleted come back. Needs no git. Use dryRun to see what it would do. The coolFTP app asks the user to approve when it is open.
coolftp_uploadwrite actionUpload a local file or directory to a remote path. The server confirms each file's size afterwards, and files inside the project's remote directory are recorded in the deploy manifest so the next deploy does not send them again. …
coolftp_verifyFetch the project's public URL and the files of the last deploy (or the given paths) and report status codes, plus whether static files are being served with the local bytes. Deploys nothing.
coolftp_writewrite actionWrite text content to a file on the server, creating parent directories. …
Public scan report
scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/coolftp.js: …T = (() => { try { return new Function("return 2n ** 32n")(); } catch { …
How Coolftp compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 1,119 Developer tools servers
- Tools
- 18
- the typical Developer tools server has 7
- Tools that change things
- 39%
- typical: 5%. Fewer write tools means less an agent can break
- Downloads a week
- 365
- more than 81% of 436 Developer tools servers with a package
What its tools let an agent do: 11 read · 7 change
Release history: 3 versions in the registry since 2026-09-11, latest 2026-10-12, typically one every 31 days.
Install Coolftp in Claude Code, Cursor or VS Code
Runs npx -y coolftp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add coolftp -- npx -y coolftp
What the publisher says
From the Coolftp repository's README, as published. We do not edit it. Read it on GitHub
coolFTP
The FTP client your coding agent can drive. A desktop SFTP / FTPS / FTP client for Windows, plus a CLI and an MCP server, built for people who write code with Claude Code, Codex, or Cursor and still have to get files onto a web server.
Say "deploy this". The agent calls coolFTP. Only files whose content changed go up, the git commit is recorded next to the deploy, the site is fetched afterward to prove it answers, and you watch every step live in the app. If it went wrong, coolftp undo puts the previous version back, no git needed. Works with any host that speaks SFTP or FTP: Hostinger, HostGator, Bluehost, GoDaddy, any cPanel box, your own VPS. Free and MIT. Website: coolftp.com.
Agents ask before they delete anything:
Why
Every FTP client assumes a human is clicking. coolFTP assumes a human is watching and an agent is doing.
- Hash-based deploys. A manifest on the server records the SHA-256 of every deployed file. Timestamps lie; hashes do not.
- Undo, no git needed. Every deploy moves the files it overwrites or deletes into a backup folder on the server first. coolftp undo puts them back, even from a dirty tree.
- Deploy history with git. Each deploy stores the commit, branch, dirty flag, message, byte count, which agent ran it, and whether the site verified live.
- One-command rollback. coolftp rollback restores the previous live commit through a temporary git worktree.
- Verification. Give a site its public URL and every deploy fetches the changed pages, compares static files byte for byte with what you uploaded, and exits non-zero when the site does not answer. coolftp verify does the same on demand.
- Live agent feed and approval dialog. Deletes, --delete deploys, rollbacks and undos wait for your click while the app is open. Deploys show as a progress card, and a Windows notification tells you how they ended.
- Safety by default. Pinned SSH host keys, passwords encrypted with your Windows account, a first-deploy guard that refuses to delete files it never uploaded, changed files swapped into place rather than overwritten, sizes confirmed by the server, resumable deploys.
packages/core shared TypeScript library: transports, sites, hash manifest, sync, deploy
packages/cli `coolftp` command line + `coolftp mcp` MCP server for agents
packages/app Electron desktop app (two-pane browser, transfer queue, live agent feed)
site/ landing page for coolftp.com
scripts/ build + end-to-end testInstall
The CLI and the MCP server run anywhere Node 18 or newer does: Windows, macOS, Linux, a headless box, CI.
npm i -g coolftp
coolftp --versionNo install at all: npx coolftp ... runs the same thing.
The desktop app is Windows for now: the installer, a portable .exe and the Claude Desktop extension (.mcpb) are on the download page with their SHA-256s.
Build from source
npm install
npm run build
npm run app # opens the desktop app
node packages/cli/dist/coolftp.js --helpTo get a global coolftp command from this checkout instead of npm: cd packages/cli && npm link.
Add a server
# SFTP with your existing ~/.ssh key or the ssh-agent
coolftp site add coolftp.com --host coolftp.com --user deploy --root /var/www/html
# FTPS with a password (shared hosts)
coolftp site add oldhost --host ftp.oldhost.net --user me --protocol ftps --password '...' --root /public_html
coolftp site test coolftp.comOr use the Sites button in the app. Sites live in %APPDATA%\coolftp\sites.json on Windows and ~/.config/coolftp/sites.json elsewhere. On Windows, passwords in that file are encrypted with DPAPI under your account; on macOS and Linux they are stored as-is until a keychain backend lands, so prefer keys for SFTP there.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Coolftp: common questions
- Is Coolftp MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Coolftp safety report
- How do I install Coolftp?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Coolftp need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Coolftp maintained?
- The last commit was 23 days ago (2026-10-12). The latest release is v0.1.4.
- What can I use instead of Coolftp?
- Servers from other publishers that do the same job: uploads.sh MCP server, Dockhold MCP server and Agent Harnesses MCP server.
- How does Coolftp compare with other Developer tools MCP servers?
- safety score 85/100 (higher than 70% of 1,119 Developer tools servers); tools 18 (the typical Developer tools server has 7); tools that change things 39% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Coolftp
Same job from other publishers: the closest match first, then the best rated.
uploads.shHost files from coding agents; stage on a branch and attach to GitHub PRs.not reviewedEstablishedA- DockholdDeploy your project to a live HTTPS URL from your AI tool; read logs, set variables, resize apps.not reviewedGrowingA
- Agent HarnessesAgent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery.not reviewedEstablishedA
walkerOS FlowBuild, validate, simulate, and deploy walkerOS event pipelinesnot reviewedEstablishedB- OmnaraDeploy durable AI agents with Omnara, an open-source managed-agent platform.not reviewedEstablishedA