Connect Pullzip to your AI tools

1) Claude Desktop One click

Download the extension file (.mcpb) and double-click it. The 7-Zip engine is inside, so nothing else needs installing.

Download the extension (.mcpb) · v0.8.9

1. Double-click the .mcpb file, or drop it on Claude Desktop → Settings → Extensions.
2. In the install dialog, choose the allowed folder (default: Downloads) and whether access is read-only.
3. Ask: “Is Downloads/report.zip safe to open?”

2) Other AI tools (local stdio)

These tools attach an MCP server by running a command. The Pullzip server is inside the .mcpb above, so unpack it and point the tool at it. Node.js must be installed.

① Prepare the server (once)

1. Rename the downloaded .mcpb to .zip and unpack it, for example into C:\Pullzip.
2. If you can see server/index.js and bin/7z.exe in there, you are ready.

② Common configuration (mcpServers form)

Adjust the paths and the allowed folder to your machine.

{
  "mcpServers": {
    "pullzip": {
      "command": "node",
      "args": ["C:/Pullzip/server/index.js", "C:/Users/<you>/Downloads"],
      "env": { "AF_7Z_FALLBACK": "C:/Pullzip/bin/7z.exe" }
    }
  }
}

③ Where each tool keeps it

Tool	Settings location
Cursor	~/.cursor/mcp.json or the project's .cursor/mcp.json
VS Code (Copilot)	.vscode/mcp.json — see the form below
Cherry Studio · Trae · Kimi Code	The app's MCP settings → “Add stdio server” → paste the JSON above
Gemini CLI · Qwen Code	~/.gemini/settings.json · ~/.qwen/settings.json (same form)
Claude Desktop (manual)	Settings → Developer → claude_desktop_config.json

Claude Code

claude mcp add pullzip -e AF_7Z_FALLBACK=C:/Pullzip/bin/7z.exe -- node C:/Pullzip/server/index.js C:/Users/<you>/Downloads

VS Code (.vscode/mcp.json)

{
  "servers": {
    "pullzip": {
      "type": "stdio",
      "command": "node",
      "args": ["C:/Pullzip/server/index.js", "C:/Users/<you>/Downloads"],
      "env": { "AF_7Z_FALLBACK": "C:/Pullzip/bin/7z.exe" }
    }
  }
}

For read-only use, add --read-only after the args or set AF_READ_ONLY=true in env.

3) Pullzip API Self-hosted HTTP

The same server started in HTTP mode becomes a JSON-RPC (MCP) API. It runs only on your own computer or server, so files never leave; it is token-authenticated and read-only by default. Remote clients such as the ChatGPT or Gemini apps use this address too.

① Start the server

node C:/Pullzip/server/index.js --http --port 8765 C:/Users/<you>/Downloads

On start the console prints the address and the auth token:

Pullzip MCP (HTTP) listening on http://127.0.0.1:8765/mcp
auth: "Authorization: Bearer <token>"  or secret URL /mcp/<token>

② Safe defaults

• Read-only by default — allow writes (creating and extracting archives) with --allow-write.
• Token required — generated automatically; pin it with --token <value> or the AF_TOKEN environment variable.
• Nothing outside the allowed folder is reachable; request bodies are capped at 4 MB; DNS-rebinding protection (only the allowed Host answers).

③ Example calls

curl -s http://127.0.0.1:8765/mcp \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

curl -s http://127.0.0.1:8765/health     # {"ok":true}

④ Exposing it to the internet (ChatGPT · Gemini apps)

These services accept only a public HTTPS address. Attach a tunnel and allow its domain with --public-host.

node C:/Pullzip/server/index.js --http --port 8765 C:/Users/<you>/Downloads --public-host <tunnel-domain>
cloudflared tunnel --url http://127.0.0.1:8765

There is no officially hosted public API — so that your files are never uploaded to our servers, the server always runs in your own environment. That is how the “nothing uploaded” promise is kept.