
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
quick-html-share-mcp
Advanced tools
MCP server that lets your coding agent (Claude Desktop, Cursor, Codex CLI, Claude Code, Continue) publish HTML and get back a shareable URL with viewer analytics — in one tool call. No account, link is the secret.
MCP server for quick-html-sharing — paste HTML, get an unguessable shareable URL plus viewer analytics, all from inside your coding agent.
For vibe coders sharing AI-generated HTML demos with friends, clients, or coworkers without setting up a deploy pipeline.
Add to your MCP client config — no install step beyond that, npx fetches on demand.
~/Library/Application Support/Claude/claude_desktop_config.json (macOS) — or the equivalent path on your OS:
{
"mcpServers": {
"qhs": { "command": "npx", "args": ["-y", "quick-html-share-mcp"] }
}
}
Restart Claude Desktop.
Settings → MCP → Add Server, or edit ~/.cursor/mcp.json:
{
"mcpServers": {
"qhs": { "command": "npx", "args": ["-y", "quick-html-share-mcp"] }
}
}
Same pattern — point the client at npx -y quick-html-share-mcp as a stdio MCP server.
Claude Code supports MCP too, but the companion qhs skill is a lighter-touch alternative (skill = markdown file + tiny helper, no Node process per session).
Five tools that show up in your agent's tool list:
| Tool | What it does |
|---|---|
qhs_share | Upload an HTML document or snippet, get back a public shareable URL + private edit URL |
qhs_edit | Update HTML at an existing share (slug stays the same) |
qhs_delete | Permanently take down a share (URL returns 404 after) |
qhs_stats | Get view count, last viewed time, created time |
qhs_list | List shares created from this machine |
your agent quick-html-share-mcp hosted qhs worker
(this npm package, stdio) (Cloudflare, free tier)
│ │ │
├─ qhs_share(html) ───────▶│ │
│ ├─ POST /api/upload ──────────────▶│
│ │◀─ {slug, shareUrl, editToken} ───┤
│ │ │
│ ├─ write ~/.qhs/shares.json │
│ │ (local edit-token store) │
│ │ │
│◀─ {shareUrl, editUrl} ───┤ │
Edit tokens are persisted to ~/.qhs/shares.json so qhs_edit / qhs_delete can find them on subsequent calls without you having to remember anything. The companion Claude Code skill writes to the same file.
#edit=…), so they never reach the server's HTTP logs.Hosted by qhs · Report watermark is injected into every share for abuse handling.MIT
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.