
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@dropwarp/mcp
Advanced tools
MCP server for DropWarp — gives AI assistants a native tool to send a file and return a shareable link.
An MCP server that gives AI assistants a native tool to send a file and return a shareable link via DropWarp.
When this server is connected, a model like Claude can do things like "email this
report to me" → it calls send_file and replies with a download link. No glue code.
{
"mcpServers": {
"dropwarp": {
"command": "npx",
"args": ["-y", "@dropwarp/mcp"],
"env": { "DROPWARP_API_KEY": "dw_live_YOUR_KEY" }
}
}
}
For Claude Desktop, that file is claude_desktop_config.json (Settings →
Developer → Edit Config). Restart the client after editing.
| Tool | What it does |
|---|---|
send_file | Upload a file (by path or inline content) → returns a download link |
list_files | List files currently stored under your key |
delete_file | Delete a stored file by id |
Uses your DropWarp plan: free keys send files up to 250 MB (links live 2 hours, 50 sends/day); paid ($1/mo) goes to 5 GB, 30-day links, unlimited. The server surfaces an upgrade hint when a free key hits its daily cap.
| Var | Required | Notes |
|---|---|---|
DROPWARP_API_KEY | yes | Your dw_live_… key |
DROPWARP_BASE_URL | no | Override the API base (self-host/testing) |
Requires Node 20+.
MIT
FAQs
MCP server for DropWarp — gives AI assistants a native tool to send a file and return a shareable link.
The npm package @dropwarp/mcp receives a total of 19 weekly downloads. As such, @dropwarp/mcp popularity was classified as not popular.
We found that @dropwarp/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.