HaoyouBox Publish

com.haoyouboxPublished by haoyoubox.comv1.0.0Updated Oct 26, 2026

Publish local HTML or Markdown as expiring password-protected HaoyouBox links.

The publisher's own server: Publish.fun

VerifiedSTDIODesktop onlyProductivity & WorkflowFiles & Storage

Overview

AI-generated overview

Publishes a single local HTML or Markdown file to HaoyouBox as an expiring, password-protected browser link and returns the link, password and expiry.

What you can do
  • Publish one explicit local .html, .htm, .md or .markdown file to HaoyouBox as a fixed, browser-ready page
  • Generate a password-protected share link with a server-enforced expiry and return the complete link, visible password and actual expiry
  • Choose a Chinese or English receiver interface for the shared page
  • Run a device approval flow on first use and keep the publish token in the agent's private credential store
When to use it
Useful when you want to hand a single report, note or static page to someone who has no HaoyouBox account and should open it in a browser, with time-limited and password-protected access. It is not meant for bulk uploads, site management or link revocation.
Requirements
Runs as a local stdio process on a desktop machine, installed as the npm package haoyoubox-mcp or as an agent Skill. A HaoyouBox account is needed for the first-use device approval, which produces the publish token stored as HAOYOUBOX_TOKEN (optional, publish-only). Network access to the hosted HaoyouBox service is required.
Before you install
The complete share link embeds the password, so it should be treated as a sensitive access credential. Do not publish files containing secrets, personal data, private keys or environment variables; the tool is limited to one explicit file and does not upload directories, hidden files or keys. The publish token must stay in the agent's private credential store, and device approval requires an explicit user action. The hosted service and server source are not in the open repository.

Installation

In SourceWeft

  1. Open HaoyouBox Publish in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

HaoyouBox Agent Skill

中文说明

Publish one local HTML or Markdown file to HaoyouBox from a compatible AI agent. The Skill creates an expiring, password-protected browser link and returns the complete link, visible password, and actual expiry.

This repository contains the open Agent Skill and its documentation. The hosted HaoyouBox service and server source are not part of this repository.

Install

Codex, Claude Code, Cursor, and other supported agents

Use the cross-agent Skills installer:

bash
npx skills add cheng-big/haoyoubox-agent-skill --skill haoyoubox-publish -g

Review the Skill before you approve installation. Restart or reload your agent if it does not discover the Skill immediately.

Gemini CLI

bash
gemini skills install https://github.com/cheng-big/haoyoubox-agent-skill --path skills/haoyoubox-publish

Gemini CLI asks for installation consent. Use /skills list after installation to confirm that haoyoubox-publish is enabled.

Manual installation

Copy the skills/haoyoubox-publish directory into a Skill location supported by your agent, such as ~/.agents/skills/haoyoubox-publish.

The current hosted copy remains available at haoyoubox.com/agent/SKILL.md.

Use

Ask your agent:

text
Publish report.html to HaoyouBox and create a password-protected link that expires in 24 hours. Use English for the receiver page. Return the complete link, password, and actual expiry together.

For a Chinese receiver page:

text
把 report.html 发布到好友盒，生成 24 小时密码保护链接。接收页使用中文。请一起返回完整链接、密码和实际到期时间。

On first use, the agent opens a HaoyouBox device approval flow. You sign in to HaoyouBox and approve the device. The agent then stores the publish token in its private credential store.

What It Publishes

  • One explicit .html, .htm, .md, or .markdown file.
  • A fixed browser-ready version on HaoyouBox.
  • A password-protected link with a server-enforced expiry.
  • A Chinese or English receiver interface.

The Skill does not upload directories, ZIP files, hidden files, environment files, keys, symlinks, or an entire workspace. It does not read upload history, delete pages, revoke links, or manage accounts.

Security

  • Review the Skill before installation.
  • Device approval always requires an explicit user action.
  • The publish token must stay in the agent's private credential store.
  • The raw share password is derived locally. HaoyouBox receives a salt and verifier, not the raw password.
  • The complete share link includes the password for convenient prefill. Treat the complete link as one sensitive access credential.
  • Do not publish files that contain secrets, personal data, private keys, or environment variables.

See SECURITY.md for vulnerability reporting and token-response steps.

Product

Recipients open the generated link in a browser. They do not need to install this Skill or create a HaoyouBox account.

Contributing

See CONTRIBUTING.md. Run npm test before opening a pull request.

License

The files in this repository are licensed under the Apache License 2.0. Use of the hosted HaoyouBox service remains subject to the product's published terms and policies.

Source: README.md at commit 37ee323

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.0LatestOct 19, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Publish integrations

Publish.fun

fun.publishOfficial publisher

Publish.fun lets an assistant submit research papers for AI review, track and revise them, upload figures, cite published work and file or answer reports.

Streamable HTTPWeb executable
Productivity & Workflow13 toolsNov 5, 2026

new.estate — listing drafts

estate.newOfficial publisher

Remote MCP server that lets an assistant draft personal real estate listings on a user's new.estate account from a conversation.

Streamable HTTPWeb executableAuth
Business & CommerceCredential requiredOct 31, 2026

Publish To All Skill Stores

Published by GitHub account xixi048

Local MCP server that helps an assistant list agent-skill stores, run a readiness check on a SKILL.md skill, and build the package shapes stores accept.

STDIODesktop only
Productivity & WorkflowNot validated · the package type cannot run in the sandboxOct 26, 2026

mcpship: check and publish MCP servers

Published by GitHub account emanueltns

Checks a remote MCP server against the Claude connector directory rules and guides its publication step by step.

STDIODesktop only
Productivity & WorkflowNot validated yetOct 24, 2026

ClaimGate starter kit - set up a publish gate

Published by GitHub account caseone115

ClaimGate starter kit: sets up a local publish gate that checks AI-assisted marketing copy against your evidence, policy and AI-disclosure rules.

STDIODesktop only
Productivity & WorkflowNot validated yetOct 27, 2026