Tools That Don't Upload

Tools That Don't Upload

MCP server and REST API for data, text, code, PDF and web tasks. Requests, including any file you send to a tool, go to our server (Cloudflare Workers), are processed in memory and are not stored. For tools that run entirely on your computer, use the local server in plugin/ (no network requests).

• MCP endpoint (Streamable HTTP): https://toolsthatdontupload.com/mcp (v1.6.0)
• MCP tools: search_tools, run_tool, list_categories (search and run the REST catalog), run_flow (run a saved file flow, with vars), hwp_to_markdown, hwp_to_text, hwp_to_docx (Korean HWP/HWPX documents)
• Client setup (Claude Desktop, Claude Code, Cursor, VS Code, Windsurf): https://toolsthatdontupload.com/docs/mcp/
• REST API: https://toolsthatdontupload.com/openapi.json (every endpoint, generated; every documented example is tested)
• Network tools (fetch URL, DNS, WHOIS, SSL) need an X-API-Key header. Free key: https://toolsthatdontupload.com/api-keys/

Korean tools

Romanization, amounts in Korean words (일금 ...원정), particles (조사), initial consonants (초성), business-number checksum, personal-data masking. Document generation: 견적서 / 거래명세서 (XLSX), 차용증 / 표준근로계약서 (DOCX).

Egress receipts

Every REST response has an X-Egress header and every MCP result has _meta["com.toolsthatdontupload/egress"] listing external hosts contacted (none for most tools).

Files through MCP

PDF tools accept file_base64 / files_base64 (max 10 MB) and return file_base64.

Quick start

Claude Code:

claude mcp add --transport http tools-that-dont-upload https://toolsthatdontupload.com/mcp

Cursor / other clients:

{"mcpServers":{"tools-that-dont-upload":{"url":"https://toolsthatdontupload.com/mcp"}}}

Limits

• Anonymous: compute tools under fair use (rate limited); file tools 20 calls/day and AI tools 10 calls/day per IP, reset at 00:00 UTC; network tools need a key.
• Free key: 1,000 credits/month, plus a daily allowance of 20 file and 10 AI calls per key.
• Files through MCP: up to 10 MB. Tool results: up to 2 MiB.
• Paid plans are listed at https://toolsthatdontupload.com/pricing/ ; checkout is not open yet.

Privacy

Yellow = edge memory only. Orange = our edge fetches the URL you give. Blue = Cloudflare Workers AI. Details: https://toolsthatdontupload.com/privacy/

Note: this repository has the source of the MCP server and gateway Workers. The static site and the other tool Workers are deployed separately (see Development notes).

Listed in the Claude Market MCP directory

MIT License

Repository layout

• workers/ — source of the production Cloudflare Workers that this repo deploys: tools-mcp-server (the MCP server at /mcp), tools-hub-ratelimit (gateway for network, file and AI tools), tools-hub-keys, tools-hub-kr (Korean tools), tools-hub-docs (Korean documents). Every folder in workers/ is deployed by GitHub Actions (.github/workflows/deploy.yml → scripts/deploy.mjs) with build provenance attestations; the live commit is shown at https://toolsthatdontupload.com/mcp and https://toolsthatdontupload.com/transparency/.
• tests/ — black-box regression tests that run against a deployed MCP endpoint (node tests/search-regression.mjs [MCP_URL]).
• plugin/ — Claude plugin (hosted connector + offline local server + 2 skills).
• local/ — offline MCP bundle source (.mcpb, release local-v1.0.0).
• server.json — MCP Registry metadata.
• SECURITY.md — how outbound requests are restricted, known limits, and how to report issues.

Development notes

• The MCP server code that actually runs is workers/tools-mcp-server/worker.mjs. The old root mcp-server.js was an outdated copy and was removed on 2026-10-12 (still in git history).
• Not everything is in this repo: the static site, the ~25 compute-tool Workers and the network-tool Workers are deployed separately. The MCP server reaches them through Cloudflare service bindings.
• Pushing to workers/, scripts/deploy.mjs or the workflow file deploys to production. Test changes on a separate workers.dev script first.