
zspace-cli
io.github.skyzhao1223Published by GitHub account skyzhao1223v0.1.13Updated Oct 27, 2026
Zero-config MCP server + CLI for ZSpace NAS: file ops and pool stats via the desktop client.
Overview
MCP server and CLI for ZSpace (极空间) NAS that lets an assistant browse, search, upload, download and reorganize files and read pool and disk health through the…
- What you can do
- List, inspect, search and tree-view files and directories on the NAS
- Create, rename, move, copy and delete files and folders, with glob patterns
- Upload and download files, including sliced upload for large files and optional MD5 verification
- Read storage pools, usage profile, directory sizes, largest files, per-disk health and SMART reports
- List, restore, purge or empty the recycle bin, with confirmation gating on destructive tools
- Install packaged agent skills for NAS reporting and cross-NAS file organizing
- When to use it
- Useful when you keep media, backups or project files on a ZSpace NAS and want an assistant to find, move, upload or clean up files and report on storage and disk health without SSH or a public API.
- Requirements
- Runs locally as a Python package (pip install zspace-cli with the mcp extra) or as a published container image; the ZSpace desktop client must be running and logged in, since the server talks to its local proxy on 127.0.0.1:13579. The login state file (vuex.json) is auto-detected, or pointed at with ZS_CONFIG_DIR or --config-dir; ZS_BASE_URL overrides the proxy address. No API keys or passwords are declared.
Installation
In SourceWeft
- Open zspace-cli in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Manage your 极空间 (ZSpace) NAS from the terminal or AI agents — no password, no SSH, no DDNS.
mcp-name: io.github.skyzhao1223/zspace-cli
Just keep the ZSpace desktop client logged in on macOS.
📖 How large-file sliced upload was born: 一次 1.4GB 备份引发的逆向 (zh, CSDN) · CLI guide: 极空间 NAS 命令行管理指南 (zh, CSDN)
Beginner guide (no coding required) · Skills — incl. 9 cross-NAS organizer skills for AI agents · 中文文档
Install
Prerequisite: the ZSpace desktop client is running and logged in on macOS.
Quick start
CLI options
zs check, zs ls, zs info, zs find, zs tree, zs usage, zs du,
zs bigfiles, zs disks, zs smart, zs recycle list/config accept --json
for machine-readable output. zs mv/zs cp/zs rm/zs down accept * ? glob
patterns on the source path. zs baidu check/ls/tasks/fails also accept
--json.
lspages through large directories automatically (the NAS API returns at most 50 entries per call).finduses the NAS full-text index, so it searches across directories. Upload/download show a progress bar on a real terminal and stream the file (no full-file buffering). Pass--verifytozs upto download the uploaded file to a temporary directory and compare its MD5 with the local source; verification is opt-in because it doubles transfer. CJK paths work out of the box. Files above 64 MB are uploaded through the desktop client's sliced/v2/file/uploadprotocol (2 MB slices), because the local proxy rejects oversized single-request bodies with HTTP 413; a 413 on a smaller file falls back to slices automatically.
Features
Use with AI agents (Skills)
Then tell your agent things like "list the files in /sata11/my/data". The skills ship inside the wheel, so zs skill works on any machine that has zspace-cli installed.
Besides zspace-nas (the zero-config base for ZSpace file ops), zs skill installs a family of 9 cross-NAS organizer skills. Their scanners are pure-stdlib and run on any mounted path (SMB/NFS), so they work with ZSpace, Synology, QNAP, UGREEN, etc. All follow the same read-only pattern: scan → the LLM drafts an old→new plan → you confirm → the agent executes (deletes always quarantine first).
Start with nas-report to see the big picture, then run whichever specialist it recommends. The most common combo is dedup-finder + file-sorter. De-duping first is recommended — you skip moving bytes you're about to delete, and you avoid same-name collisions — but the reverse order misses nothing: de-dup is content-level and independent of directory layout (verified: both orders find the identical duplicate groups). file-sorter reports suspected copies: X MB (N% of the bytes to move) so you can decide by the number instead of by a rule. See skills/README.md for the full list. Media-library naming stays a separate project: media-manager-skill.
How it works
ZSpace has no official CLI or public API. zspace-cli talks to the desktop client's local proxy, so it works behind NAT as long as the client is online:
Disclaimer — This is an unofficial, community-maintained project, not affiliated with or endorsed by ZSpace (极空间). It relies on the desktop client's local proxy interface, which is not officially documented. It only reads the login state of your own account on your own machine — it does not bypass authentication, crack encryption, or touch anyone else's data. Use at your own risk; make sure your use complies with the ZSpace user agreement and your local laws.
Platform support
Works on any OS where the ZSpace desktop client exposes its local proxy on
127.0.0.1:13579. The login state (vuex.json) is auto-detected:
If the client stores it elsewhere, point the CLI/SDK at it explicitly:
Windows/Linux config locations are best-effort guesses (not verified against a real client). If auto-detection misses yours, please open an issue with the actual path so it can be added.
Windows on ARM — some
[mcp]dependencies (e.g.cryptography) don't ship ARM64 wheels for every version, sopip install "zspace-cli[mcp]"may try to build them from source (slow, or fails without Rust). Force prebuilt wheels:pip install --only-binary=:all: "zspace-cli[mcp]".
MCP configuration (optional)
Docker (headless)
Multi-arch images (linux/amd64, linux/arm64) are published to GHCR on every
release, so there is nothing to build:
The image's default command is zs-mcp, so an MCP client can run
ghcr.io/skyzhao1223/zspace-cli directly to start the server; pass zs … to
use the CLI instead. Tags are latest plus each release version.
To run the CLI / MCP server in a container against the desktop client proxy on the host via compose — no desktop client needed inside the image:
It mounts the host's ZSpace config read-only (ZS_CONFIG_HOST_DIR) and points
ZS_BASE_URL at the host via host.docker.internal. On Linux hosts, either use
network_mode: host or the included extra_hosts mapping. To build the image
yourself instead of pulling it from GHCR:
Globbing
rm / mv / cp / down accept glob patterns (*, ?, [...], **) that
are expanded on the NAS:
Or via the SDK: client.glob("/sata11/my/data/**/*.mkv").
API reference
Note: the interface parameter names are non-standard (
parent/toinstead ofpath/dest) — documented by the community from the desktop client's behavior.
Repository layout
Integrations
Pair zspace-cli with Jellyfin / Emby / MoviePilot / MCP clients / Docker and media-manager-skill for media library tooling.
For cloud-drive → NAS pipelines, combine with baidu-pan-skill: it downloads Baidu NetDisk (百度网盘) share links reliably (cookie extraction, transfer-save, resumable chunked downloads, structural verification), then zs up takes over for the sliced large-file upload to the NAS. Both ship as agent skills, so one prompt can drive the whole backup.
Roadmap
- File upload/download
- Linux / Windows client auth (best-effort path detection +
ZS_CONFIG_DIR) - Docker headless option (
ZS_BASE_URL+docker-compose.yml) - Pre-built multi-arch images on GHCR (
ghcr.io/skyzhao1223/zspace-cli, published per release) - Batch glob helpers (
glob()+zs rm/mv/cp/downpatterns) - Agent skill family: 9 cross-NAS organizers (incl.
file-sorterfor generic type-based archiving) +nas-reportentry, selective install (zs skill --list/--only) - Optional EXIF-based photo dating (
photo-organizer --exif: exiftool → mdls → mtime fallback) — #14 - Per-skill config overrides (
skills/<name>/config.json: whitelist dirs / extension rules) — #15 · shipped for all 8 scanners (nas-reportdeliberately excluded). The key set differs per skill andwhitelist_dirshas four distinct effects across five of them — see the family table inskills/README.md - Growth-trend reports (
nas-report difftwo snapshots: category/dir growth, rate & ETA) — #16
Contributing
PRs welcome — see
CONTRIBUTING.md for dev setup, quality gates, and the
skill-authoring guide (including the skills/ ↔ src/zspace_cli/skills/
dual-copy sync rule that CI enforces).
- 🧭 Not sure where to start? Pick from
CONTRIBUTION_IDEAS.md
(difficulty-tagged backlog, incl. reverse-engineered NAS API notes) or the
good first issuelabel - 💬 Questions & showcases: Discussions
- 🔒 Security issues: private reporting via SECURITY.md
- 🤝 This project follows the Contributor Covenant
Legal
Unofficial community project, not affiliated with or endorsed by ZSpace/极空间.
It automates your own logged-in desktop client on your own machine —
no passwords handled, no service gates bypassed (membership-gated features are
documented as gated, never worked around). API notes are interoperability
documentation of observed client behavior and may break with client updates.
Concerns or takedown requests: [email protected] —
legitimate requests are answered promptly. Source archives ship with every
GitHub Release; the maintainer keeps off-platform git bundle mirrors.
License
MIT
Source: README.md at commit d6f0977
Tools
0Version history
5- v0.1.13LatestOct 9, 2026
- v0.1.12Oct 9, 2026
- v0.1.10Oct 8, 2026
- v0.1.8Sep 23, 2026
- v0.1.4Sep 18, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts