Tools That Don't Upload MCP server

Tools That Don't Upload

MCP server and REST API for data, text, code, PDF and web tasks. Requests are processed in memory and not stored.

• MCP endpoint (Streamable HTTP): https://toolsthatdontupload.com/mcp (v1.5.0)
• MCP tools: searchtools, runtool, list_categories (they search and run the REST catalog)
• REST API: https://toolsthatdontupload.com/openapi.json (every endpoint, generated; every documented example is tested)
• Network tools (fetch URL, DNS, WHOIS, SSL) need an X-API-Key header. Free key: https://toolsthatdontupload.com/api-keys/

Korean tools

Romanization, amounts in Korean words (일금 ...원정), particles (조사), initial consonants (초성), business-number checksum, personal-data masking. Document generation: 견적서 / 거래명세서 (XLSX), 차용증 / 표준근로계약서 (DOCX).

Egress receipts

Every REST response has an X-Egress header and every MCP result has _meta["com.toolsthatdontupload/egress"] listing external hosts contacted (none for most tools).

Files through MCP

PDF tools accept filebase64 / filesbase64 (max 10 MB) and return file_base64.

Quick start

Claude Code:

claude mcp add --transport http tools-that-dont-upload https://toolsthatdontupload.com/mcp

Cursor / other clients:

{"mcpServers":{"tools-that-dont-upload":{"url":"https://toolsthatdontupload.com/mcp"}}}

Limits

• Anonymous: compute tools under fair use; file 20 calls/day; AI 10 calls/day per IP.
• Free key: 1,000 credits/month. Paid plans: coming soon.

Privacy

Yellow = edge memory only. Orange = our edge fetches the URL you give. Blue = Cloudflare Workers AI. Details: https://toolsthatdontupload.com/privacy/

Note: this repository is a documentation snapshot, not the full deployed source.

Listed in the Claude Market MCP directory

MIT License

Repository layout

• workers/ — source of the production Cloudflare Workers that this repo deploys: tools-mcp-server (the MCP server at /mcp), tools-hub-ratelimit (gateway for network, file and AI tools), tools-hub-keys, tools-hub-kr (Korean tools), tools-hub-docs (Korean documents). Every folder in workers/ is deployed by GitHub Actions (.github/workflows/deploy.yml → scripts/deploy.mjs) with build provenance attestations; the live commit is shown at https://toolsthatdontupload.com/mcp and https://toolsthatdontupload.com/transparency/.
• tests/ — black-box regression tests that run against a deployed MCP endpoint (node tests/search-regression.mjs [MCP_URL]).
• plugin/ — Claude plugin (hosted connector + offline local server + 2 skills).
• local/ — offline MCP bundle source (.mcpb, release local-v1.0.0).
• server.json — MCP Registry metadata.
• SECURITY.md — how outbound requests are restricted, known limits, and how to report issues.

Development notes

• The MCP server code that actually runs is workers/tools-mcp-server/worker.mjs. The old root mcp-server.js was an outdated copy and was removed on 2026-10-12 (still in git history).
• Not everything is in this repo: the static site, the ~25 compute-tool Workers and the network-tool Workers are deployed separately. The MCP server reaches them through Cloudflare service bindings.
• Pushing to workers/, scripts/deploy.mjs or the workflow file deploys to production. Test changes on a separate workers.dev script first.