Log inSubmit server
Qurl MCP logo

Qurl MCP

by layervai

Manage expiring, policy-bound qURL access links, tokens, and sessions through MCP tools.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Qurl MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "layervai-qurl-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@layervai/qurl-mcp"
      ],
      "env": {
        "QURL_API_KEY": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Install not yet sandbox-tested— the server itself is confirmed live (we called its tools/list endpoint). The stdio install command is a separate, ongoing check.

Overview

layervai/qurl-mcp connects MCP clients to qURL for creating, redeeming, searching, updating, and revoking expiring access links. It runs locally over stdio with the qURL CLI or API, and can also use authenticated HTTP backed by the API. Reach for it when an agent needs controlled access to a URL, token-level link management, batch issuance, or active-session termination. Links and tokens can enforce expiry, one-time use, session limits, and access policies such as IP, geography, user agent, and AI-agent filters.

Use cases

  • Create time-limited customer or contractor access links
  • Apply IP, geographic, user-agent, or AI-agent access policies
  • Issue multiple recipient links in one request
  • Inspect and terminate active access sessions
  • Rotate or revoke individual qURL tokens

Key features

  • Create and resolve expiring qURL links
  • Manage resource and token-level policies
  • Batch-create up to 100 qURLs
  • Search and paginate qURL resources
  • Inspect or terminate active sessions
  • Run over stdio with the qURL CLI or API

Tools13

What Qurl MCP lets your agent do. Expand a tool for its parameters.

Verified live~7.3k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

19/19 checks healthy over the last 80d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 12d ago via OSV.dev · @layervai/qurl-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars4Stargazers on the source repository.
npm downloads920Package downloads in the last 30 days.
Last commit3d agoMost recent push to the default branch.
Tools exposed13Callable tools this server registers over MCP.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How Qurl MCP works

What layervai/qurl-mcp does

layervai/qurl-mcp exposes qURL access-link management through the Model Context Protocol. It can create a policy-bound link for a target URL, redeem an access token, inspect resources, issue additional links, and revoke or modify access. Resource-level operations can be addressed with r_ IDs; token-level operations use q_ IDs and generally require the parent resource ID.

The server is suited to temporary sharing workflows such as sending a customer a time-limited download URL, granting a contractor one-time access, or placing IP and geographic restrictions around a private endpoint. It also supports session inspection and termination when access needs to be cut off without revoking every token.

How it works

A qURL resource groups access under a target URL and policy. Creating or minting a link returns a full qurl_link, but that link is displayed only in the creation response. Agents should persist or deliver it immediately; later resource and token lookups do not recover the original link.

resolve_qurl accepts the at_ access token extracted from a link. A successful resolution reveals the target URL and supplies a temporary, source-IP-bound network grant. Depending on the token policy, resolution can consume a one-time use, reduce the remaining session allowance, or be rejected by access filters.

Resource changes include expiration, tags, descriptions, custom domains, and host-header behavior. Token-specific changes cover expiration, labels, policies, session limits, and session duration. Batch creation accepts up to 100 items, with each item succeeding or failing independently.

Setup and configuration

The package runs as a local stdio MCP server. In no-account local mode, it invokes the qURL CLI installed on the same machine; the first publish creates that machine's identity. Node.js 22.12 or later is required for the MCP server. Account-backed operation uses QURL_API_KEY and the qURL API, while authenticated remote HTTP operation is also supported.

The repository describes use with Claude Desktop, Claude Code, Cursor, and Codex. Configure the server in the selected MCP client and ensure the chosen transport matches the client and available tool set.

Tools and capabilities

  • Create single links with create_qurl, or issue up to 100 links using batch_create_qurls.
  • Redeem access tokens with resolve_qurl.
  • Discover resources with cursor-based, filtered list_qurls queries and inspect one resource with get_qurl.
  • Extend, update, or permanently revoke resources with extend_qurl, update_qurl, and delete_qurl.
  • Issue another link for an existing resource with mint_link.
  • Revoke or modify an individual token with revoke_qurl_token and update_qurl_token.
  • Inspect active sessions with list_qurl_sessions and terminate one or all sessions with terminate_qurl_sessions.

Limitations and notes

Creation and link minting are not permanent by default: when no expiry is supplied, the API uses 24 hours. Returned links are one-shot display values. extend_qurl is not idempotent, so retrying it can extend the same resource more than once; use an absolute expires_at through update_qurl when retry-safe behavior matters.

Deleting a resource is irreversible and stops every token beneath it. To disable one recipient while preserving sibling links, revoke the individual token instead. Session termination closes active sessions but does not revoke the underlying tokens. Batch operations are non-transactional, so callers must inspect per-item results and handle partial failures.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Qurl MCP

layervai/qurl-mcp is an MCP server that connects AI clients to qURL for controlled access links. Its main tools create, resolve, list, inspect, update, extend, mint, batch-create, and revoke qURLs, while also managing individual tokens and active sessions with expiry and access-policy controls.

Install the package as a local stdio MCP server and ensure Node.js 22.12 or later is available. No-account local mode also requires the qURL CLI on the same machine; account-backed mode uses QURL_API_KEY, and authenticated remote HTTP operation is supported.

Call create_qurl with a target URL and optional expiry, one-time-use setting, session limit, or access policy. The response includes a qurl_link shown only once. Use batch_create_qurls for up to 100 links, or mint_link when adding a link to an existing resource.

Call revoke_qurl_token with the parent resource_id and the token's qURL display ID. This stops that token while leaving sibling tokens active. Use delete_qurl instead when every token under the resource must stop working.

Yes. Cursor is named as a supported MCP client for this server. Configure the server using its stdio transport or another transport supported by the client, then check the installed server's available tools.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewQurl MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/layervai-qurl-mcp?style=directory)](https://allmcps.com/mcp/layervai-qurl-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/layervai-qurl-mcp"><img src="https://allmcps.com/api/badge/layervai-qurl-mcp?style=directory" alt="Qurl MCP on AllMCPs" /></a>