--- bezeichner: "io.github.Nizoka/zipnative-mcp" art: "mcp_server" slug: "io-github-nizoka-zipnative-mcp" paketkoordinate: "npm:zipnative-mcp" status: "aktiv" homepage: "https://github.com/Nizoka/zipnative-mcp#readme" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.Nizoka" registerseite: "https://tracevero.com/mcp/io-github-nizoka-zipnative-mcp" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: true quelloffen_einsehbar: true roh_beschreibung: "ZIP MCP server: create, inspect, verify, extract securely, modify without recompression. 13 tools" version: "1.0.0" roh_umgebungsvariablen: "ZIPNATIVE_MCP_OUTPUT_DIR, ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_PORT, ZIPNATIVE_MCP_HTTP_TOKEN, ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES, ZIPNATIVE_MCP_MAX_ENTRIES, ZIPNATIVE_MCP_WORKERS" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/Nizoka/zipnative-mcp" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_OUTPUT_DIR" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-07" roh_aktualisiert_am: "2026-09-07" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "zipnative-mcp" roh_paketversionen: "1.0.0" roh_laufzeithinweise: "npx" roh_umgebungsformate: "filepath, number" roh_umgebungsbeschreibungen: "ZIPNATIVE_MCP_CACHE_DIR=Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue. · ZIPNATIVE_MCP_HTTP_TOKEN=Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer ' or answers 401. Compared constant-time, never logged. · ZIPNATIVE_MCP_MAX_ENTRIES=Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start. · ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES=Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED. · ZIPNATIVE_MCP_OUTPUT_DIR=Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache). · ZIPNATIVE_MCP_PORT=Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set. · ZIPNATIVE_MCP_WORKERS=Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"zipnative-mcp\",\"version\":\"1.0.0\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"ZIPNATIVE_MCP_OUTPUT_DIR\",\"description\":\"Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache).\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_CACHE_DIR\",\"description\":\"Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_PORT\",\"description\":\"Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_HTTP_TOKEN\",\"description\":\"Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer ' or answers 401. Compared constant-time, never logged.\",\"required\":false,\"secret\":true},{\"name\":\"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES\",\"description\":\"Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_MAX_ENTRIES\",\"description\":\"Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_WORKERS\",\"description\":\"Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start.\",\"format\":\"number\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}" --- # zipnative MCP — ZIP creation, inspection, secure extraction & verification ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_transportarten: stdio | | Path argument present | true | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_OUTPUT_DIR | | Repository URL listed | true | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_repository_url: https://github.com/Nizoka/zipnative-mcp | | Description (raw) | ZIP MCP server: create, inspect, verify, extract securely, modify without recompression. 13 tools | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Declared version | 1.0.0 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Environment variables (raw) | ZIPNATIVE_MCP_OUTPUT_DIR, ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_PORT, ZIPNATIVE_MCP_HTTP_TOKEN, ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES, ZIPNATIVE_MCP_MAX_ENTRIES, ZIPNATIVE_MCP_WORKERS | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Repository (raw) | https://github.com/Nizoka/zipnative-mcp | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Path environment variables (raw) | ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_OUTPUT_DIR | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | First listed in the registry (raw) | 2026-09-07 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-09-07 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Package identifiers (raw) | zipnative-mcp | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Package versions (raw) | 1.0.0 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Runtime hints (raw) | npx | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Environment variable formats (raw) | filepath, number | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Environment variable descriptions (raw) | ZIPNATIVE_MCP_CACHE_DIR=Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue. · ZIPNATIVE_MCP_HTTP_TOKEN=Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer ' or answers 401. Compared constant-time, never logged. · ZIPNATIVE_MCP_MAX_ENTRIES=Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start. · ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES=Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED. · ZIPNATIVE_MCP_OUTPUT_DIR=Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache). · ZIPNATIVE_MCP_PORT=Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set. · ZIPNATIVE_MCP_WORKERS=Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start. | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"zipnative-mcp","version":"1.0.0","runtimeHint":"npx","transport":"stdio","environment":[{"name":"ZIPNATIVE_MCP_OUTPUT_DIR","description":"Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache).","format":"filepath","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_CACHE_DIR","description":"Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue.","format":"filepath","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_PORT","description":"Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set.","format":"number","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_HTTP_TOKEN","description":"Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer ' or answers 401. Compared constant-time, never logged.","required":false,"secret":true},{"name":"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES","description":"Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED.","format":"number","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_MAX_ENTRIES","description":"Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start.","format":"number","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_WORKERS","description":"Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-nizoka|io.github.Nizoka]] --- - Registry page: - Retrieved on: 2026-10-11