World Monitor
Real-time global intelligence on conflict, markets, energy, trade, shipping and cyber. 102 tools.
作者提供的说明(英文原文)
Hand work between AI agents across devices and vendors: one-shot links or an E2EE channel.
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
通过 4/4 项检查 · 你的提问会经过开发者的服务器(handover.tools)
第一步:你用哪个 AI?
选择你用的应用,步骤会显示在下方。
可连接 Claude · 约 2 分钟
不需要密钥,不用安装程序 · 在 claude.ai 或桌面应用设置一次,即可在聊天中使用 · 免费账户可添加 1 个
CustomizeConnectors
把这里的内容复制到 Claude 中同名的输入框,然后点击 Continue
handover.toolshttps://handover.tools/mcpAuthentication 保持 Claude 检测到的设置,然后点击 Add
+Connectorshandover.tools
用 handover.tools 告诉我你能帮我做什么,然后做一件给我看✓ 如果 Claude 说正在使用 handover.tools,或回答中出现 handover.tools 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 Anthropic 帮助页面核实 · 你的界面可能因版本略有不同
仅企业版 ChatGPT 可连接
适用于网页版 ChatGPT Business、Enterprise 或 Edu,需由工作区管理员或所有者添加 · 使用 Free、Plus 或 Pro:你的 ChatGPT 方案暂时无法自行连接 MCP
Plugins+Add custom MCP server
输入名称,在 Connection 下粘贴地址,勾选风险提示,然后点击 Create as a plugin
handover.toolshttps://handover.tools/mcp开启新聊天,输入前先从插件列表中选择 handover.tools
用 handover.tools 告诉我你能帮我做什么,然后做一件给我看✓ 如果 ChatGPT 说正在使用 handover.tools,或回答中出现 handover.tools 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 OpenAI 帮助页面核实 · 你的界面可能因版本略有不同
可连接 Claude Code · 约 2 分钟
不需要密钥,不用安装程序
Mac:按 Command+空格,输入 Terminal · Windows:打开 PowerShell
claude mcp add --transport http handover https://handover.tools/mcp应能看到 handover.tools 在列表中并显示已连接
用 handover.tools 告诉我你能帮我做什么,然后做一件给我看✓ 如果 Claude Code 说正在使用 handover.tools,或回答中出现 handover.tools 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 Anthropic 帮助页面核实 · 你的界面可能因版本略有不同
可连接 Cursor · 约 2 分钟
不需要密钥,不用安装程序
用 handover.tools 告诉我你能帮我做什么,然后做一件给我看✓ 如果 Cursor 说正在使用 handover.tools,或回答中出现 handover.tools 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 Cursor 帮助页面核实 · 你的界面可能因版本略有不同
可连接 VS Code · 约 2 分钟
不需要密钥,不用安装程序
用 handover.tools 告诉我你能帮我做什么,然后做一件给我看✓ 如果 VS Code 说正在使用 handover.tools,或回答中出现 handover.tools 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 VS Code 帮助页面核实 · 你的界面可能因版本略有不同
其他支持 MCP 的应用(如 Windsurf、Zed、Gemini CLI)添加方式各不相同,请在应用列表中查看
通过网页连接的应用使用的地址
https://handover.tools/mcpJSON 设置在下方“开发者专用”中
Claude Code
claude mcp add --transport http handover https://handover.tools/mcpCursor (~/.cursor/mcp.json)
{
"mcpServers": {
"handover": {
"url": "https://handover.tools/mcp"
}
}
}VS Code (mcp.json)
{
"servers": {
"handover": {
"type": "http",
"url": "https://handover.tools/mcp"
}
}
}这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
依据这个服务器的连接方式和各应用自己的文档,检查于 2026年11月10日。
通过互联网连接,适用于
ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast
工具名称和描述与服务器在 2026年11月7日 报告的完全一致。这些内容由作者撰写,不是我们写的;我们以纯文本形式显示。
handoff_putStore a piece of context and get back a short code. The person gives the link handover.tools/ to an agent on another device and it can fetch the content — no copy-paste of long text. The code is 8 letters, easy to type on a phone. NOT ENCRYPTED: the server can read what you store
handoff_getFetch content stored by handoff_put using its 8-character code. The code is case-insensitive and hyphens are ignored, so 'kvmtrhxp' and 'KVMT-RHXP' are the same; the person may give it as a link like handover.tools/kvmtrhxp, and passing that is fine too. Return the content to the
handoff_revokeDestroy content stored by handoff_put right now, before its TTL runs out and whether or not it has been fetched. Requires the revoke_key returned by handoff_put — the person fetching with the short code cannot revoke, only the writer can. Use this the moment someone says they sen
channel_openStart pairing two agents on different machines for a multi-round exchange (e.g. one explores, the other studies and asks follow-up questions). Use the local client at https://handover.tools/client/channel.py — do not call this by hand. The client generates a secret password local
channel_joinSecond half of pairing, run by the local client at https://handover.tools/client/channel.py. Send only the first 3 characters of the spoken code (the nameplate) plus this side's SPAKE2 message; the other 5 characters are the password and must never be sent to the server. The name
channel_sendRelay one ciphertext to the other side of a paired channel. The ciphertext must come from the local client at https://handover.tools/client/channel.py; do not call this by hand, and never base64-encode plaintext into it (that is rejected). Only send after the person has seen and
channel_fetchUse the local client at https://handover.tools/client/channel.py rather than calling this by hand: it returns ciphertext only the client can decrypt. Returns the peer's messages this side has not fetched yet. Call only when the person asks. Clients fetch with peek=true, which mar
channel_ackUse the local client at https://handover.tools/client/channel.py rather than calling this by hand. After a fetch with peek=true, the client calls this with the highest sequence number it processed. That is what the peer sees as read, so a response lost in transit never turns into
channel_closeEither side can close. Deletes the channel, both keys, and every stored message immediately. The other side's next fetch reports not_found_or_closed.
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月12日
注册名称已通过域名 handover.tools 验证(注册中心会核实域名所有权)
代码最后更新于24天前
我们还没有从 GitHub 读取这个仓库
在 1416 毫秒内响应(HTTP 200)
无需登录
已读取 9 个工具描述,未发现针对 AI 的隐藏指令
提问、分享技巧或报告无法使用。按“有帮助”数量排序。
还没有评价
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 4 项适用的基础检查中通过了 4 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
注册中心没有列出必需的密钥,不过有些服务器会在首次使用时要求你登录。
它在作者的云端运行。通过互联网连接,无需安装,但你发送的内容会经过作者的服务器。
GitHub 仓库最后更新于24天前,最新版本(1.1.0)于24天前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接,因此也能用于支持远程 MCP 的应用,例如 ChatGPT Business 及以上方案。
同一分类中有:World Monitor, Claude Flow, Tldraw
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:↓ 每周下载量i★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
Real-time global intelligence on conflict, markets, energy, trade, shipping and cyber. 102 tools.
AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
One agent writes it, another agent reads it. You only carry an 8-letter link between them.
handover.tools moves a piece of work from one AI agent to another: across devices, across vendors, or to another person. Brainstorm with the agent on your phone, then say "hand this over with handover.tools". Paste the link it gives you (handover.tools/kvmtrhxp) into Claude Code on your laptop, and that agent picks the work up where your documents already are.
Bring the idea to your context, not your context to the idea.
There is no account and nothing to install. Any agent that can open a web page can use it.
| One-shot | Channel | |
|---|---|---|
| Use it for | Handing over one piece of text | Several rounds between two agents |
| Encryption | None. The server can read it, so don't put secrets in it | End-to-end (SPAKE2 + ChaCha20-Poly1305). The server only ever stores ciphertext |
| Lifetime | Gone after the first read, or after 60 minutes (24 h max) | Until either side closes it |
| What the agent needs | Can open a URL, or has MCP | Can run a Python script (uv run) |
| Who decides | The person carries the link | The person approves every send and starts every fetch |
curl -X POST https://handover.tools/api/handoff/put \
-H 'Content-Type: application/json' \ -d '{"content":"...","label":"notes"}' # → {"code":"kvmtrhxp", "revoke_key":"...", ...} curl "https://handover.tools/api/handoff/get?code=kvmtrhxp"
Opening handover.tools/ doesn't use up the code. That URL returns instructions, and the actual read is a second request. Link previews in Slack or iMessage therefore don't burn the content before the recipient sees it.
curl -so ~/.handoff/channel.py --create-dirs https://handover.tools/client/channel.py
uv run ~/.handoff/channel.py open --name study --brief "..." # machine A: prints a code uv run ~/.handoff/channel.py join kvmtrhxp --name study # machine B uv run ~/.handoff/channel.py send --name study --kind question --file q.md uv run ~/.handoff/channel.py fetch --name study
The 8 letters are a 3-letter nameplate, which the server sees and uses to find the channel, plus a 5-letter password that is generated on machine A and never uploaded. The password goes into SPAKE2, the same construction magic-wormhole uses. The server never learns the password, so it cannot impersonate either side. /client/channel.py is served from client/channel.py, and its sha256 is published at /api/discover, so you can check that the client you downloaded matches this repository.
The threat model, including what we *don't* claim, is at handover.tools/security.
https://handover.tools/mcp. It serves both the 2026-07-28 (modern) and 2025-11-25 and earlier (legacy) protocol eras./llms.txt, /guide.md, /security.md/api/discovertools/list and /api/discover are all derived from a single tool registry (src/registry.py), so they can't drift apart.src/
entry.py routing, MCP (dual-era), content negotiation registry.py @tool decorator — one source for REST, MCP and discover tools/handoff.py, tools/channel.py the two tools guard.py quotas and the operator blocklist meter.py per-call metering page.py, docs.py, style.py the website and docs pages client/channel.py the local E2EE client, run on the user's machine tests/ end-to-end, channel and quota test suites scripts/ dev, deploy, repository checks, operator tools
| Document | What it covers |
|---|---|
| docs/system-design.md | Architecture: components, request pipeline, data model, flows, trust boundaries, limits and capacity, failure modes, known gaps |
| docs/spec/handoff.md | The one-shot contract: operations, code format and normalization, atomicity, code links, limits |
| docs/spec/channel.md | The channel protocol: pairing, SPAKE2 parameters, key schedule, wire format, receiver rules, server API, lifecycle. Detailed enough to write a second client |
| docs/decisions.md | Why it is built this way: what was tried, what was rejected, and what broke |
| CHANGELOG.md | What changed, newest first. Also at handover.tools/changelog |
The specs are the contract. A behavior change starts in the spec, then the code and tests follow.
Requires Node ≥ 22 and Python 3.12.
npm install
scripts/dev.sh # generates src/*_src.py and public/, then runs wrangler dev on :8787 tests/e2e.sh # end-to-end tests against the local server tests/channel.sh # two isolated clients: pairing, tampering, replay tests/quota.sh # quota gates (local only: edits counters directly) scripts/check.sh # repository rules: English only, every Dxx reference resolves
CI runs the check and the three suites on every push.
npx wrangler d1 create , then put the name and id into wrangler.toml.routes pattern to your domain.CLOUDFLARE_API_TOKEN=… scripts/deploy.shTables are created on the first request. scripts/block.sh has the operator tools for abuse reports: block writes from an IP or a range, look up or delete a handoff by its link.
Issues and pull requests are welcome. AGENTS.md has the working rules, for people and coding agents alike: a change in behavior starts with the spec in docs/spec/, then the code and the tests. Report vulnerabilities privately: see SECURITY.md.
MIT. Fonts: Atkinson Hyperlegible, SIL OFL 1.1 (see assets/fonts/LICENSE.txt).