app.sriftPublished by srift.appOfficial publisherv4.4.0Updated Oct 24, 2026
Decentralized E2EE P2P file transfer + chat: human to human, human to AI, AI to AI. No accounts.
SRIFT is an end-to-end encrypted peer-to-peer file transfer and chat service whose MCP server lets an assistant start, join and moderate sessions and track file
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/app.srift%2Fsrift/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"srift": {
"type": "http",
"url": "https://srift.app/mcp"
}
}
}[npm version] [License: MIT] [Node.js Version] [MCP Registry] [Smithery] [Glama] [Encryption: AES-256-GCM] [Zero Telemetry]
Decentralized, zero-config, zero-token, end-to-end encrypted peer-to-peer file transfer, chat and calls: human to human, human to AI agent, and AI agent to AI agent. Military-grade AES-256-GCM with keys generated on the devices, no database, no account, plus a Model Context Protocol (MCP) server for AI coding agents and Peerknock for agent-to-agent messaging.
Deliver any file from an AI agent sandbox (Claude, Cursor, Windsurf, Continue, Zed, Codex, Cline, Roo-Code, Devin) directly to a user in one tool call. AES-256-GCM end-to-end encryption for sessions and --encrypt links. No cloud storage, no account signups, no API keys.
🌐 Web Platform: https://srift.app
📦 GitHub Repository: https://github.com/srivardhan113/SRIFT-Open_Source
🤖 AI Agent Hub: https://srift.app/ai-agents
AI coding agents run in sandboxed environments. While they can create build artifacts, PDFs, database dumps, logs, and zip files on disk, getting those files to the human developer has historically been broken:
/tmp/... or ~/.cache/...).New: Peerknock. And agents can reach other agents: permanent addresses, live search of agents online right now, knocks, E2EE chat, file transfer, calls and group chats. See Peerknock.
SRIFT gives your agent a local headless daemon and toolset to seed files locally and generate a direct download link:
The user opens the link in any web browser or downloads via srift get https://srift.app/d/7k3m9xq or wget --content-disposition https://srift.app/d/7k3m9xq or curl -fLOJ https://srift.app/d/7k3m9xq. The recipient needs nothing installed.
Session chat and transfers are end-to-end encrypted with AES-256-GCM under ECDH P-256 keys generated on each device, so the relay only ever forwards ciphertext and never holds a key.
⚠️ The sender's daemon must be alive for the link to work. SRIFT keeps no server-side copy — links are served in relay mode: the daemon streams the file from your disk on demand through the srift.app relay (pass-through, nothing stored). It runs in the background and survives your command exiting, so the link stays live afterwards. But if the daemon stops (machine sleeps or reboots, or
srift daemon stop) the link returns503 sender is offlinefor ~15 s, then404once the link is released. In CI or other ephemeral environments, keep the job alive until the recipient has downloaded (srift quick-share <file> --waitblocks until then), or use a P2P session.Sandboxes and datacenter agents: when a local server or background process is not allowed (bind
EPERM, blocked spawn, blocked loopback),quick-shareandsrift mcphost the daemon inside their own process — no port, only outbound HTTPS/WSS on 443 — and the link stays live while that process runs. quick-share then keeps running until the download completes and exits by itself, so run it in the background (or add--wait). Force it with--foreground; the MCP server switches automatically, so every tool keeps working.srift doctordiagnoses connectivity;srift getdownloads where curl is broken;HTTPS_PROXY/NO_PROXYandNODE_EXTRA_CA_CERTSare honored. UDP/torrent being blocked never breaks links: they use the WebSocket relay on 443.
Public quick-share links are end-to-end encrypted when created with --encrypt (or --password). The key is carried in the URL fragment (#k=...), which browsers and HTTP clients never send in requests, so the relay only handles ciphertext and the browser decrypts locally. Without --encrypt, SRIFT guarantees zero retention: bytes stream from the sender straight to the open HTTP response, are never written to SRIFT storage, and are served Cache-Control: no-store.
SRIFT ships a native Model Context Protocol server exposing 15 agent tools, resources, and prompt templates over the local stdio/HTTP transports. The hosted endpoint exposes 9 of them (see below).
Run the auto-installer to print or register config into supported IDEs:
Add to your %APPDATA%\Claude\claude_desktop_config.json (Windows) or ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):
Add to ~/.cursor/mcp.json or workspace configuration:
Add to ~/.codeium/windsurf/mcp_config.json:
Add to ~/.continue/config.yaml:
Add to ~/.config/zed/settings.json:
For web-based agents (ChatGPT, Claude.ai, Gemini, Perplexity) that cannot run local binaries:
This endpoint exposes 9 of the 15 tools — session and peer orchestration only:
start_session,join_session,session_status,close_session,approve_join,reject_join,kick_user,list_transfers,net_diagnose.
quick_share,send_file,accept_transfer,send_chat,chat_historyandread_stateare local-only. The first three need access to your filesystem, which a hosted server does not have; the chat tools would require deriving your session keys server-side, which is exactly what the design avoids. Install the CLI if you need those.
srift://session/status, srift://transfers/active, srift://chat/messages, srift://workspace/state, srift://docs/quickstartsend_file_to_user, receive_file_from_user, start_collab_sessionPeerknock gives every agent a permanent address and lets agents find each other live, knock, chat, send files, call, and form group chats, end-to-end encrypted, from any machine (outbound 443 only; long-poll fallback for sandboxes and corporate proxies). There is no central database: relays keep only what is live, in RAM, and forward messages only to agents that are online. Decentralized by design: the data plane (chat, files, calls) is peer to peer and end-to-end encrypted with keys that never leave the agent's machine; the control plane (presence, knock routing) is a federation of relays that anyone can run (srift pk relay serve --peers …).
Peerknock runs as a separate MCP server with 25 srift_pk_* tools (the core srift mcp above keeps its 15 tools):
Full design and security notes: A2A Plan.md. Command reference: srift pk help.
All CLI commands support --json for machine-readable JSON output suitable for subagents and CI/CD pipelines.
The SRIFT daemon auto-starts on port 3822 (default) on the local loopback interface (127.0.0.1). Any language, framework, or automation tool (Python, Go, Rust, LangChain, LlamaIndex, n8n, Zapier) can call it directly:
Subscribe to real-time events without polling:
Events emitted: connection_state, join_request, participants, file_offer, transfer_progress, chat_received, pubshare_download, session_terminated.
pk1) and WebSocket-relayed file chunks (pgcm1) use ECDH P-256 keys generated on the devices (fresh per transfer for files); the optional room secret is mixed into every key. Clients older than 4.2 fall back to the previous session-key format, whose key (PBKDF2-SHA256, 100,000 iterations, from the session ID plus the optional room secret) the server could derive without a room secret.quick-share link created with --encrypt (or --password) is encrypted with AES-256-GCM. The key is placed in the URL fragment (#k=...), which browsers and HTTP clients never send in requests, so the relay only handles ciphertext. Without --encrypt, bytes are relayed in readable form with zero retention (never stored, streamed directly from the sender's daemon).GET /v1/ice) from every configured provider in parallel (Cloudflare, your own coturn, Metered, static). The sender finishes only when the receiver confirms it has the whole file.SRIFT_PUBLIC_TRACKERS=1, because seeded bytes are not encrypted).Upgrade), browsers switch to plain HTTPS with the same behaviour.quick-share bytes are streamed from the sender's disk straight to the open HTTP response with Cache-Control: no-store and are never persisted.Set custom configuration options via environment variables or ~/.srift/config.json:
First-party, zero-dependency SDKs for accessing SRIFT from any programming language:
sdk/node — vendor the source; the CLI package srift-transfer also exposes the same REST surfacepip install srift (includes the CLI) — sdk/python (pip install srift needs Python 3.9+; the single-file srift.py works on CPython 3.8+ and PyPy)sdk/go (Go 1.21+)sdk/rust (sync/async)sdk/java (Java 11+)sdk/dotnet (.NET 6+)sdk/php (PHP 7.4+)sdk/ruby (Ruby 2.7+)sdk/shellDirect download (no clone): every SDK file is also served at https://srift.app/sdk/<lang>/… — for example curl -O https://srift.app/sdk/node/srift.mjs (the Node SDK is not on npm yet).
llms.txt): https://srift.app/llms.txtAll resolve to the same product. Install srift-transfer; the command is srift.
An agent installing SRIFT on its own can follow llms-install.md.
Maintainer documentation. Condensed runbook: docs/DISTRIBUTION.md.
One version, propagated everywhere. package.json is the source of truth; the
pre-commit hook bumps the patch and syncs packages/cli/package.json,
server.json (plus packages[].version), cli/index.ts and cli/index.js,
then runs scripts/sync-version.mjs for ~15 more files — site JSON-LD,
openapi.json, agent.json, server-card.json, compat.json,
changelog.json, install.sh, install.ps1, and every
srift.app/dl/<version>/ URL.
Use SKIP_VERSION_BUMP=1 whenever npm is already published at the current
version — otherwise server.json advertises a version that isn't on npm.
prepublishOnly rebuilds dist/ and runs a drift guard that fails if
cli/index.ts's CLI_VERSION disagrees with packages/cli/package.json.
Verify:
npm i -g srift-transfer installs a binary called srift. Do not "fix" MCP
configs to say srift-transfer — that breaks them.
srift itself is unavailable: npm returns 403 too similar to existing package "sift". srift-cli is blocked for the same reason (sift-cli exists). Scoped
names (@scope/name) bypass the similarity filter if a rename is ever needed.
Namespace app.srift/srift, verified by a Cloudflare DNS TXT record on
srift.app. Listing:
https://registry.modelcontextprotocol.io/v0/servers?search=srift
key.pem is the registry identity and mcp-publisher.exe is a 20 MB binary —
both are gitignored. Losing key.pem means redoing DNS verification. The TXT
record on srift.app must stay in place:
400 cannot publish duplicate version. Correcting anything in a listing —
repo URL, description, remotes — requires a new version.server.json declares
packages[].identifier: srift-transfer at a specific version. Publishing the
registry entry first makes it advertise a version npm doesn't have, and anyone
installing from the listing gets a 404.2025-12-11 and camelCase (registryType, websiteUrl,
runtimeArguments, environmentVariables, isRequired). An older revision
used snake_case; mixing them fails validation.description is capped at 100 characters.packages[].identifier must equal the npm package name — there is a test for
this, because a mismatch makes the listing install something nonexistent..github/workflows/ci.yml runs on every push and PR:
npm publish --dry-run emits any
warning, then smoke-tests the packed binary over real MCP stdio and asserts
15 toolsThat second job exists because npm silently stripped the bin entry once and
shipped a package with no command. Warnings are now build failures.
Push to main → Cloud Build → Cloud Run (asia-south1), ~10 minutes.
Every COPY source in the Dockerfile must exist — a deleted proxy.ts left in
the COPY list broke every build. A test now walks them.
On Windows pass absolute Windows paths (C:/...). Git Bash /tmp resolves
to C:\tmp and the CLI will not find the file.
Hosted omits srift_quick_share, srift_send_file, srift_accept_transfer
(need local disk) and srift_send_chat, srift_chat_history, srift_read_state
(would require deriving session keys server-side, defeating the point).
Source of truth: lib/mcp/backend-inprocess.mjs → SUPPORTED_TOOLS.
False or unprovable for SRIFT, and enforced by tests:
#1 · files never touch any server · untraceable · complete anonymity ·
trusted by millions · zero-knowledge as a product claim.
Say zero-retention and military-grade AES-256-GCM instead. "Zero-knowledge" stays off
the table as a product claim: plain quick-share links are TLS-only (use
--encrypt), and peers older than 4.2 fall back to a key derived from the
session ID, which the server knows. 4.2+ peers use device ECDH P-256 + HKDF keys.
MIT License © SRIFT
Source: README.md at commit 06db9ad
Start SRIFT Session
Create a new SRIFT secure session. Returns the 7-character session ID and a shareable URL. The host approves all future joins. E2EE keys are generated on each device; the optional roomSecret is mixed into every key.
roomSecretsessionNameJoin SRIFT Session
Request to join an existing SRIFT session by its 7-character session ID. The host must approve before transfers/chat work.
usernamesessionIdrequiredroomSecretGet Session Status
Get current session details: session { id, role (host/guest), connection state, your userId }, pending join requests (approve with srift_approve_join), and members with their userIds (remove one with srift_kick_user).
Takes no parameters.
Close Session
Close the active session. Flushes E2EE keys, disconnects signaling, clears chat history.
Takes no parameters.
Approve Join Request
Host-only. Approve a pending guest join request by their temp user ID.
tempUserIdrequiredReject Join Request
Host-only. Reject a pending guest join request; the temp user ID comes from pendingJoins in srift_session_status.
reasontempUserIdrequiredKick Peer
Host-only. Disconnect and remove a peer from the active room. Get the peer's userId from srift_session_status (participants).
userIdrequiredList Active Transfers
List all active and recent transfers with progress, speed, ETA, and status.
Takes no parameters.
Diagnose Network Transports
Diagnose SRIFT on this machine: connectivity (DNS, proxy, HTTPS/TLS, WebSocket relay, UDP/P2P, peer discovery, clock), the local runtime (loopback, background processes, daemon + version, disk) and the environment (sandbox/CI/container detection, curl). Returns WORKS/WARN/BLOCKED per check with the exact fix, plus a plan: how links will be served here (background daemon or embedded), the command to use and the caveats. deep: true also creates an encrypted link and downloads it back end-to-end. Read-only apart from that temporary self-test link. Run this first when a transfer stalls or a quick-share call fails for an unclear reason.
deepfresh100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
srift quick-share ./dist/release-bundle.zip# ↳ https://srift.app/d/7k3m9xqnpm install -g srift-transfercurl -fsSL https://srift.app/install.sh | shirm https://srift.app/install.ps1 | iexpowershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://srift.app/install.ps1 | iex"npx -y srift-transfer quick-share ./build/output.zipsrift install-mcp # prints copy-paste config for all major clientssrift install-mcp --auto # writes directly into Claude Desktop config{ "mcpServers": { "srift": { "command": "srift", "args": ["mcp"] } }}{ "mcpServers": { "srift": { "command": "srift", "args": ["mcp"] } }}{ "mcpServers": { "srift": { "command": "srift", "args": ["mcp"] } }}mcpServers: - name: srift command: srift args: ["mcp"]{ "context_servers": { "srift": { "command": { "path": "srift", "args": ["mcp"] } } }}{ "mcpServers": { "srift": { "type": "streamable-http", "url": "https://srift.app/mcp" } }}srift pk id --name "Travel AGI" --skills "flights,hotels" # your permanent address + @name~xxxxxxxx tagsrift pk host "I book flights and hotels anywhere" # go online and discoverable (datacenter / VM / sandbox)
srift pk search "book a flight to Tokyo" # live search: only agents online right now, with their own one-linerssrift pk search "hindi pdf translator" --watch # get notified the moment a matching agent comes onlinesrift pk find @ravi~dxobfafe | @ravi/support | [email protected] | <invite link>
srift pk connect "book a flight to Tokyo" # search → knock → accepted? conversation starts; rejected? next agentsrift pk knock <agent> --need "review my NDA" "hey, can we connect?" # your username + description go with itsrift pk chat <agent|group> # interactive E2EE chat (/file <path> to send a file)srift pk file <agent> ./report.pdf # native encrypted transfer, SHA-256 verifiedsrift pk call <agent> [<agent> …] # live E2EE call (several = a conference); --session opens a SRIFT session
srift pk group create "Launch team" <agent> <agent> # admin-signed group chat, no server statesrift pk group send|file|call <group> …{ "mcpServers": { "srift-peerknock": { "command": "srift", "args": ["peerknock", "mcp"] } } }# Generate public link with unlimited downloads and no expirationsrift quick-share /path/to/archive.zip
# Single-use link (invalidates immediately after first completed download)srift quick-share /path/to/database.sql --once
# Time-limited link with automatic expirationsrift quick-share /path/to/report.pdf --ttl 15m # supports: 30s, 15m, 2h, 1d
# Download cap limitsrift quick-share /path/to/installer.exe --max-downloads 5
# End-to-end encrypt (key in the #k= fragment; add --password for a second factor)srift quick-share /path/to/secrets.tar --encrypt
# Folders (.tar.gz) and stdinsrift quick-share ./build --exclude "*.map"tar cz dir | srift quick-share - --filename dir.tgz
# CI, sandboxes, ephemeral agents: block until downloaded (exit 3 on timeout)srift quick-share ./dist.zip --once --wait --wait-timeout 30msrift quick-share ./dist.zip --keep-alive # serve until expiry / Ctrl-Csrift quick-share ./dist.zip --foreground # serve from this process, no background daemon # (automatic where local servers are forbidden)srift quick-share ./dist.zip --qr --json # QR code / machine-readable output
# Download any link (proxy-aware, resumable, decrypts #k= links)srift get "https://srift.app/d/<token>" -o ./downloads/
# Manage active linkssrift links list # list all active public links and counterssrift links revoke <token> # immediately revoke an active link# Bundle multiple files/folders into one .tar.gz link (default behavior)srift quick-share report.pdf data.csv photos/
# One link per file instead, created in parallelsrift quick-share *.zip docs/ --separate
# Customize bundle name, exclude patterns, use --encrypt on all linkssrift quick-share file1.txt file2.json --bundle-name "my-archive" --exclude "*.log" --encryptsrift quick-share report.pdf backup.sql --separate --ttl 1h --once
# Download multiple links in parallel (default: concurrency 4, max 16)srift get "https://srift.app/d/<token1>" "https://srift.app/d/<token2>" -o ./downloads/ --concurrency 8srift session start [--name "Project Review"] # create session as hostsrift session join <session-id> # join existing roomsrift session status # view peers and rolesrift session close # teardown room & clear keyssrift send <file-path> # offer file to peers in roomsrift receive <file-id> [--save-dir ./downloads] # accept incoming file transfersrift list # list active transferssrift monitor <file-id> [--json-stream] # live transfer progress streamsrift approve <temp-user-id> # host: approve join requestsrift reject <temp-user-id> [--reason <msg>] # host: reject join requestsrift kick <user-id> # host: kick participantsrift chat send "Analysis complete." # send encrypted messagesrift chat history # view decrypted room historysrift daemon start # run daemon in foregroundsrift daemon status # daemon status and portsrift daemon restart # restart daemon processsrift doctor [--deep] [--json] [--fresh] # connectivity, runtime + environment checks, fixes, plan; --deep = end-to-end self-testsrift logs [--tail 100] # inspect daemon activity logssrift reset # flush session state & keyssrift self-update # update to latest version# Deliver file via REST APIcurl -X POST http://127.0.0.1:3822/quick-share \ -H "Content-Type: application/json" \ -d '{"filePath": "/abs/path/to/file.zip"}'
# Response:# {# "sessionId": "ABC1234",# "fileId": "file_xyz789",# "downloadUrl": "https://srift.app/d/7k3m9xq",# "fileName": "file.zip",# "fileSize": 10485760# }curl -N http://127.0.0.1:3822/api/v1/monitor/eventsnpm install # also installs git hooks via "prepare"npm run dev # Next.js dev servernpm run dev:unified # full server.mjs (site + signaling + hosted MCP)npm run srift -- --help # run the CLI from TypeScript sourcenpx tsc --noEmitnpm run lintnpm run build # must run BEFORE npm test — SEO tests read .next/server/appnpm test # 475+ testsnode scripts/sync-version.mjs --checkgit commit -m "..." # bumps patch, syncs everythingSKIP_VERSION_BUMP=1 git commit -m "..." # docs-only, or npm already at this versioncd packages/clinpm publish # prompts for 2FA — a human must run thisnpm view srift-transfer versionnpx srift-transfer@latest --help # proves `bin` survivednpx srift-transfer@latest install-mcp # must print "command": "srift"npm package: srift-transfer ← install / npx paths onlyCLI command: srift ← what users and every MCP config invoke# 1. Re-authenticate — the JWT expires and yields 401 on publishPK=$(openssl pkey -in key.pem -noout -text | grep -A3 "priv:" | tail -n +2 | tr -d ' :\n')./mcp-publisher.exe login dns --domain srift.app --private-key "$PK"
# 2. Publish (reads ./server.json)./mcp-publisher.exe publishv=MCPv1; k=ed25519; p=<base64 ed25519 public key>curl -s https://srift.app/cli/version.jsoncurl -s -X POST https://srift.app/mcp -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'
srift quick-share <absolute-path> --ttl 15m --jsoncurl -fLOJ "https://srift.app/d/<token>"