
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@easybits.cloud/mcp
Advanced tools
MCP server for EasyBits — the cloud for AI agents: sandboxes, web, files, SQL databases, documents and app hosting
The cloud for AI agents. Connect your AI to EasyBits — run code in an isolated microVM, search and read the web, store files, query SQL databases, generate documents and deploy apps — all through natural language.
Sign up at easybits.cloud and generate an API key from your developer dashboard.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"easybits": {
"command": "npx",
"args": ["-y", "@easybits.cloud/mcp"],
"env": {
"EASYBITS_API_KEY": "your-api-key"
}
}
}
}
claude mcp add easybits -e EASYBITS_API_KEY=your-api-key -- npx -y @easybits.cloud/mcp
Add to your Cursor MCP settings:
{
"mcpServers": {
"easybits": {
"command": "npx",
"args": ["-y", "@easybits.cloud/mcp"],
"env": {
"EASYBITS_API_KEY": "your-api-key"
}
}
}
}
Ask your AI agent things like:
| Tool | Description |
|---|---|
list_files | List files with pagination and filtering |
get_file | Get file metadata and a signed download URL (1h expiry) |
upload_file | Create a file record and get a presigned upload URL |
update_file | Update name, access level, or metadata |
delete_file | Soft-delete a file (recoverable for 7 days) |
restore_file | Restore a soft-deleted file |
list_deleted_files | List deleted files with days until permanent purge |
search_files | AI-powered natural language file search (requires AI key) |
bulk_upload_files | Create up to 20 file records with presigned upload URLs |
bulk_delete_files | Soft-delete up to 100 files at once |
duplicate_file | Copy an existing file (creates new storage object) |
list_permissions | List sharing permissions for a file |
| Tool | Description |
|---|---|
share_file | Share a file with another user by email |
generate_share_token | Generate a presigned download URL (60s–7 days) |
list_share_tokens | List all share tokens with expiration status |
| Tool | Description |
|---|---|
optimize_image | Convert images to WebP or AVIF with quality control |
transform_image | Resize, rotate, flip, convert format, or apply grayscale |
| Tool | Description |
|---|---|
list_webhooks | List your configured webhooks |
create_webhook | Create a webhook for file/website events (returns secret) |
update_webhook | Update URL, events, or status (ACTIVE/PAUSED) |
delete_webhook | Permanently delete a webhook |
Events: file.created, file.updated, file.deleted, file.restored, website.created, website.deleted
Payloads are signed with HMAC SHA-256 via X-Easybits-Signature header. Webhooks auto-pause after 5 consecutive failures.
| Tool | Description |
|---|---|
get_usage_stats | Storage used/limit, file counts, plan info |
| Tool | Description |
|---|---|
set_ai_key | Store an AI provider API key (Anthropic/OpenAI) for search |
list_ai_keys | List configured AI keys (masked) |
delete_ai_key | Remove a stored AI key |
| Tool | Description |
|---|---|
list_providers | List configured storage providers |
| Tool | Description |
|---|---|
list_websites | List all websites with stats |
create_website | Create a new website with auto-generated slug |
get_website | Get website details and computed stats |
update_website | Update website name or status |
delete_website | Delete website and soft-delete associated files |
Every tool follows the same conventions, so an agent always parses the same shapes:
Success returns the result as JSON text (and structuredContent when applicable).
Errors return isError: true with a JSON body { "error": "message" }, sometimes
with extra fields like code, status, or providerStatus.
Lists (list_*) all return one envelope:
{ "items": [ ... ], "nextCursor": "abc" , "hasMore": true }
Some lists also include total. When hasMore is true, pass nextCursor back as
cursor (or as offset for list_documents / list_websites) to fetch the next page.
When there are no more results, nextCursor is null and hasMore is false.
| Variable | Description | Required |
|---|---|---|
EASYBITS_API_KEY | Your EasyBits API key | Yes |
EASYBITS_URL | Custom API base URL | No |
You can also set these in a ~/.easybitsrc file:
EASYBITS_API_KEY=eb_your_key_here
For programmatic access, use the typed SDK:
npm install @easybits.cloud/sdk
import { EasybitsClient } from "@easybits.cloud/sdk";
const eb = new EasybitsClient({ apiKey: "eb_sk_live_..." });
This package is a stdio-to-HTTP proxy. It reads JSON-RPC messages from stdin and forwards them to the EasyBits MCP endpoint (https://www.easybits.cloud/api/mcp). Responses are streamed back via Server-Sent Events (SSE).
EasyBits works great alongside other AI tools. Here are common patterns for agents that have access to both EasyBits and image generation tools (like fal.ai):
1. Generate image with your image tool (fal.ai, DALL-E, etc.)
2. upload_file → get presigned URL → PUT the image bytes
3. Share via generate_share_token or set access to "public"
4. Send the URL to the user
1. User sends a photo → agent saves it locally
2. Edit with fal.ai tools (bg-remove, upscale, restyle, remove-object, inpaint)
3. upload_file the result to EasyBits for permanent storage
4. Return the EasyBits URL (persistent, unlike fal.ai temp URLs)
1. Generate images/graphics with image tools
2. upload_file each image to EasyBits
3. create_document with HTML sections that reference the uploaded image URLs
4. Share the document link
1. Generate or edit images as needed
2. upload_website_file for each asset
3. set_page_html to build pages referencing those assets
4. Deploy — user gets a live URL
MIT
FAQs
MCP server for EasyBits — the cloud for AI agents: sandboxes, web, files, SQL databases, documents and app hosting
The npm package @easybits.cloud/mcp receives a total of 41 weekly downloads. As such, @easybits.cloud/mcp popularity was classified as not popular.
We found that @easybits.cloud/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.