Mmcp.market

Vnsh MCP server

by raullenchai·io.github.raullenchai/vnsh·v1.3.0

Portable workspaces for AI agents: one encrypted link any agent can read and write

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

156 stars48 downloads/wk

Reviews

Write one

Nobody has reviewed Vnsh yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Vnsh tools (7, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • vnsh_read

    Securely retrieves and decrypts content from a vnsh URL. Use this tool whenever

  • vnsh_share

    Encrypts text content locally and uploads it to vnsh, returning a shareable URL.

  • vnsh_share_file

    Encrypts a local file and uploads it to vnsh, returning a shareable URL.

  • vnsh_workspace_createwrite action

    Creates a shared workspace and returns one link that any agent can read AND write.

  • vnsh_workspace_open

    Decrypts a vnsh workspace to a local temp file and opens it in the browser.

  • vnsh_workspace_read

    Reads the current content of a vnsh workspace URL (a /w/ link with a #w= fragment).

  • vnsh_workspace_updatewrite action

    Replaces the content of a vnsh workspace, keeping the same URL. Use this to record

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 18 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Vnsh repository's README, as published. We do not edit it. Read it on GitHub

vnsh

One workspace all your AI agents can read and write

Website • Get Started • Links • How It Works • API • Self-Hosting

Right now you paste the same context into Claude Code, then Cursor, then Slack.

vnsh gives that context one address instead. Drop it once and get a link; every agent and every person you hand it to opens the same living document, and can change it. Encrypted in your browser before upload, so vnsh never sees it, and deleted 24 hours after the last edit.

kubectl logs pod/app | vn
# https://vnsh.dev/w/k2p9xf...#w=...   edit link — read and write
# https://vnsh.dev/w/k2p9xf...#r=...   view-only — read, never write

Why this and not a pastebin

A pastebin gives you a snapshot. A workspace has a stable address and a version, so the next agent writes back to the same place instead of starting a new one. Two properties make that safe to share:

rides in the URL fragment, which HTTP never transmits. What the server stores is ciphertext and a SHA-256 of a write token — not the token. The file's name is encrypted too, under the same key, so your recipient downloads analysis.py while vnsh holds a string it cannot decode. That is checkable from outside: forge a token and you get a 403.

  • The server cannot read it. Content is encrypted client-side and the key

the version you read. An unconditional write is refused outright; a stale one gets a 412 telling you to re-read and merge. Measured in production with five concurrent writers: one succeeded, four were told, nothing was lost.

  • Two agents cannot silently clobber each other. Writes are conditional on

Get started

For an agent — the point of the thing

Paste this into Claude Code, Cursor, OpenHands, Cline, Windsurf, Zed — anything that speaks MCP:

Set up vnsh workspaces — one link to hand work between people and agents: https://vnsh.dev/llms.txt

It reads the protocol, installs the MCP server, and writes a standing rule into its own instruction file so it keeps using workspaces afterwards. By hand instead:

claude mcp add vnsh -- npx -y vnsh-mcp@1.9.0

The server exposes vnshartifactcreate, vnshartifactlist, vnshartifactread, vnshartifactupdate, vnshworkspacecreate, vnshworkspaceread, vnshworkspaceupdate, vnshworkspacehistory, vnshworkspacerestore, vnshworkspacerenew and vnshworkspaceopen, plus vnshshare, vnshsharefile and vnshread for one-shot content.

From the terminal

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y vnsh-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vnsh -- npx -y vnsh-mcp
Add to Cursor

Vnsh: common questions

Is Vnsh MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Vnsh safety report
How do I install Vnsh?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Vnsh need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Vnsh maintained?
The last commit was 21 days ago (2026-09-06). The latest release is v1.3.0.
What can I use instead of Vnsh?
Servers from other publishers that do the same job: Google Surf MCP server and Tetrees MCP server.

Alternatives to Vnsh

Same job from other publishers: the closest match first, then the best rated.

  • Google Surf
    Web, academic and code search with graph RAG, data lineage, ontology and cross-project schema links.
    B
  • Tetrees MCP
    Own, grow and trade portable agent intelligence via TAIP/1 Packs and MCP.
    B

More from raullenchai →