Vnsh MCP server
Portable workspaces for AI agents: one encrypted link any agent can read and write
156 stars48 downloads/wk
Reviews
Write oneNobody has reviewed Vnsh yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Vnsh tools (7, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
vnsh_readSecurely retrieves and decrypts content from a vnsh URL. Use this tool whenever
vnsh_shareEncrypts text content locally and uploads it to vnsh, returning a shareable URL.
vnsh_share_fileEncrypts a local file and uploads it to vnsh, returning a shareable URL.
vnsh_workspace_createwrite actionCreates a shared workspace and returns one link that any agent can read AND write.
vnsh_workspace_openDecrypts a vnsh workspace to a local temp file and opens it in the browser.
vnsh_workspace_readReads the current content of a vnsh workspace URL (a /w/ link with a #w= fragment).
vnsh_workspace_updatewrite actionReplaces the content of a vnsh workspace, keeping the same URL. Use this to record
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 18 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
What the publisher says
From the Vnsh repository's README, as published. We do not edit it. Read it on GitHub
vnsh
One workspace all your AI agents can read and write
Website • Get Started • Links • How It Works • API • Self-Hosting
Right now you paste the same context into Claude Code, then Cursor, then Slack.
vnsh gives that context one address instead. Drop it once and get a link; every agent and every person you hand it to opens the same living document, and can change it. Encrypted in your browser before upload, so vnsh never sees it, and deleted 24 hours after the last edit.
kubectl logs pod/app | vn
# https://vnsh.dev/w/k2p9xf...#w=... edit link — read and write
# https://vnsh.dev/w/k2p9xf...#r=... view-only — read, never writeWhy this and not a pastebin
A pastebin gives you a snapshot. A workspace has a stable address and a version, so the next agent writes back to the same place instead of starting a new one. Two properties make that safe to share:
rides in the URL fragment, which HTTP never transmits. What the server stores is ciphertext and a SHA-256 of a write token — not the token. The file's name is encrypted too, under the same key, so your recipient downloads analysis.py while vnsh holds a string it cannot decode. That is checkable from outside: forge a token and you get a 403.
- The server cannot read it. Content is encrypted client-side and the key
the version you read. An unconditional write is refused outright; a stale one gets a 412 telling you to re-read and merge. Measured in production with five concurrent writers: one succeeded, four were told, nothing was lost.
- Two agents cannot silently clobber each other. Writes are conditional on
Get started
For an agent — the point of the thing
Paste this into Claude Code, Cursor, OpenHands, Cline, Windsurf, Zed — anything that speaks MCP:
Set up vnsh workspaces — one link to hand work between people and agents: https://vnsh.dev/llms.txtIt reads the protocol, installs the MCP server, and writes a standing rule into its own instruction file so it keeps using workspaces afterwards. By hand instead:
claude mcp add vnsh -- npx -y vnsh-mcp@1.9.0The server exposes vnshartifactcreate, vnshartifactlist, vnshartifactread, vnshartifactupdate, vnshworkspacecreate, vnshworkspaceread, vnshworkspaceupdate, vnshworkspacehistory, vnshworkspacerestore, vnshworkspacerenew and vnshworkspaceopen, plus vnshshare, vnshsharefile and vnshread for one-shot content.
From the terminal
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
Runs npx -y vnsh-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add vnsh -- npx -y vnsh-mcp
Vnsh: common questions
- Is Vnsh MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Vnsh safety report
- How do I install Vnsh?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Vnsh need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Vnsh maintained?
- The last commit was 21 days ago (2026-09-06). The latest release is v1.3.0.
- What can I use instead of Vnsh?
- Servers from other publishers that do the same job: Google Surf MCP server and Tetrees MCP server.
Alternatives to Vnsh
Same job from other publishers: the closest match first, then the best rated.
- Google SurfWeb, academic and code search with graph RAG, data lineage, ontology and cross-project schema links.not reviewedEstablishedB
Tetrees MCPOwn, grow and trade portable agent intelligence via TAIP/1 Packs and MCP.not reviewedEstablishedB