# colapsis/transfa [Health: Active]

**Category:** 📂 File Systems  
**Repository:** https://github.com/colapsis/transfa  
**GitHub Stars:** 21  
**npm Downloads (last month):** 130  
**Views:** 2  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/colapsis-transfa

## Description
Ephemeral file transfer for AI agents and CI/CD pipelines — upload any file, get a SHA-256-verified, TTL-enforced link. 4 tools: upload, fileinfo, listuploads, deleteupload. Zero-config via npx -y transfa-mcp.

## Tools
Capabilities this server exposes over MCP:

- **upload** — Upload a file from the local filesystem and get a signed link. Returns an agent_link (direct download URL for scripts/agents) and a human_link (browser-friendly share page). SHA-256 is always computed and returned for integrity checks. Works without an API key (guest mode, 10 MB limit). Set TRANSFA_API_KEY for larger files and longer TTLs.
- **file_info** — Get metadata about an upload without downloading it. Returns filename, size, SHA-256, expiry, download count, active status, and whether the file is in a grace period.
- **list_uploads** — List your recent uploads. Requires TRANSFA_API_KEY or a key saved by `tf auth`.
- **delete_upload** — Delete an upload immediately. Requires ownership (API key must match the uploader).

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "transfa": {
    "command": "npx",
    "args": ["-y","transfa-mcp"],
    "env": {
      "TRANSFA_API_KEY": ""
    }
  }
}
```

**Requires environment variables:** `TRANSFA_API_KEY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What colapsis/transfa MCP server does

The colapsis/transfa MCP server lets an MCP-compatible agent send local files to the hosted transfa.sh service. An upload produces two links: an agent-oriented direct download URL and a browser-friendly sharing page. The response also includes a SHA-256 digest so a receiving process can verify the downloaded file.

The service accepts arbitrary file types. It detects MIME types for more than 100 formats, including machine-learning models, data files, archives, source code, media, and configuration files. Unknown formats are accepted as `application/octet-stream`.

## How it works

The server runs as a Node.js process launched through `npx`. MCP tool calls are translated into requests to transfa.sh. Uploads can run without credentials in guest mode, with a 10 MB file limit and a maximum 24-hour lifetime. Supplying an API key allows larger files and longer TTLs according to the associated plan.

Each upload has an expiry and can expose download metadata such as size, filename, checksum, download count, active status, and grace-period state. The returned links can be passed to another agent, included in a generated report, or consumed by a script.

## Setup and configuration

Start the colapsis/transfa MCP server with:

```bash
npx -y transfa-mcp
```

For Claude Desktop, add the server to the MCP configuration and provide `TRANSFA_API_KEY` when authenticated uploads are needed:

```json
{
  "mcpServers": {
    "transfa": {
      "command": "npx",
      "args": ["-y", "transfa-mcp"],
      "env": {
        "TRANSFA_API_KEY": "your-api-key"
      }
    }
  }
}
```

The API key is optional for basic guest uploads. It is required for listing uploads, deleting owned uploads, larger files, and longer retention periods.

## Tools and capabilities

The colapsis/transfa MCP server exposes four file-management tools:

- `upload` reads a path from the local filesystem, sends the file, and returns the agent link, human link, SHA-256 value, and expiry details.
- `file_info` retrieves upload metadata without downloading the file, including filename, size, checksum, expiry, download count, active state, and grace-period information.
- `list_uploads` returns recent uploads and requires an API key or credentials saved through the transfa CLI.
- `delete_upload` removes an upload immediately when the supplied API key matches its owner.

The upload service also supports options such as custom TTLs, password protection, download limits, and filename overrides through its broader API, but the available MCP input surface should be checked before relying on each option.

## Limitations and notes

Guest access is restricted to 10 MB files and 24-hour expiry. Authenticated limits depend on the account plan, with documented plan ceilings ranging from 500 MB to 100 GB and TTLs from 48 hours to 180 days. Listing and deletion are not anonymous operations. The server transfers files to the hosted transfa.sh service, so it is not a local-only file exchange mechanism.

_Full upstream README: https://allmcps.com/mcp/colapsis-transfa/readme_