srift-transfer
Advanced tools
Zero-config, zero-token peer-to-peer secure file transfer, encrypted chat, and Model Context Protocol (MCP) server for AI coding agents (Claude, Cursor, Windsurf, Continue, Zed) and developers. End-to-end AES-256-GCM encrypted.
Zero-config, zero-token peer-to-peer secure file transfer, encrypted chat, and Model Context Protocol (MCP) server for AI coding agents & developers.
Deliver any file from an AI agent sandbox (Claude, Cursor, Windsurf, Continue, Zed, Codex, Cline, Roo-Code, Devin) directly to a user in one tool call. AES-256-GCM end-to-end encryption for sessions and --encrypt links. No cloud storage, no account signups, no API keys.
🌐 Web Platform: https://srift.app
📦 GitHub Repository: https://github.com/srivardhan113/SRIFT-Open_Source
🤖 AI Agent Hub: https://srift.app/ai-agents
AI coding agents run in sandboxed environments. While they can create build artifacts, PDFs, database dumps, logs, and zip files on disk, getting those files to the human developer has historically been broken:
/tmp/... or ~/.cache/...).New: AgentNet. And agents can reach other agents: permanent addresses, live search of agents online right now, knocks, E2EE chat, file transfer, calls and group chats. See AgentNet.
SRIFT gives your agent a local headless daemon and toolset to serve files locally and generate a direct download link (add --encrypt for end-to-end encryption):
srift quick-share ./dist/release-bundle.zip
# ↳ https://srift.app/d/7k3m9xq
The user opens the link in any web browser or runs srift get https://srift.app/d/7k3m9xq or wget --content-disposition https://srift.app/d/7k3m9xq or curl -fLOJ https://srift.app/d/7k3m9xq. The recipient needs nothing installed.
Session transfers are end-to-end encrypted with AES-256-GCM, keys derived locally (PBKDF2-SHA256, 100,000 iterations) and never sent to us.
⚠️ The sender's daemon must be alive for the link to work. SRIFT keeps no server-side copy — the daemon streams the file from your disk through the srift.app relay on demand (pass-through, nothing stored). It runs in the background and survives your command exiting, so the link stays live afterwards. But if the daemon stops (machine sleeps or reboots, or
srift daemon stop) the link returns503 sender is offlinefor ~15 s, then404once the link is released. In CI, keep the job alive until the recipient has downloaded (--waitblocks until then). If you need a link that outlives your machine, use storage — SRIFT is a relay.Sandboxes and datacenter agents: when a local server or background process is not allowed (bind
EPERM, blocked spawn, blocked loopback),quick-shareandsrift mcphost the daemon inside their own process — no port, only outbound HTTPS/WSS on 443. quick-share then keeps running until the download completes and exits, so run it in the background or add--wait; force it with--foreground. The MCP server switches automatically.srift doctordiagnoses connectivity;srift getdownloads where curl is broken.
Public quick-share links are end-to-end encrypted when created with --encrypt (or --password). The key is carried in the URL fragment (#k=...), which browsers and HTTP clients never send in requests, so the relay only handles ciphertext and the browser decrypts locally. Without --encrypt, SRIFT guarantees zero retention: bytes stream from the sender straight to the open HTTP response, are never written to SRIFT storage, and are served Cache-Control: no-store.
AI agents can communicate directly among themselves without human intervention. In multi-agent systems (CrewAI, AutoGen, LangGraph, OpenAI Swarm):
srift session start --name "Swarm-Sync"srift session join <sessionId>srift chat send "{\"task\":\"analysis_complete\",\"status\":\"ready\"}"srift send ./agent_state.binIn headless cloud environments, Docker containers, Kubernetes pods, and CI/CD pipelines (GitHub Actions, GitLab CI), getting files out to developers typically requires S3 credentials or open SSH ports. With SRIFT, servers can instantly emit public download links:
# In any CI/CD job, Docker container, or remote GPU server (RunPod, Lambda Labs, EC2):
npx srift-transfer quick-share ./build/app-release.tar.gz --once --ttl 1h --wait
# ↳ https://srift.app/d/9x2m4kp (blocks until downloaded; the link is served from this job)
--ttl 1h) and single-use self-destruct (--once).SRIFT runs across all server operating systems and deployment targets:
npm install -g srift-transfer or npx) or standalone binary (curl -fsSL https://srift.app/install.sh | sh). Exposes all 15 MCP tools, CLI commands, and local HTTP REST daemon.POST https://srift.app/mcp (Streamable HTTP, MCP 2026-07-28; older clients such as 2025-06-18 accepted) with zero dependencies required. It exposes 9 session/control tools.npm install -g srift-transfer
curl -fsSL https://srift.app/install.sh | sh
irm https://srift.app/install.ps1 | iex
powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://srift.app/install.ps1 | iex"
npx srift-transfer quick-share ./build/output.zip
SRIFT ships a native Model Context Protocol server exposing 15 agent tools, resources, and prompt templates over the local stdio/HTTP transports. The hosted endpoint exposes 9 of them (see below).
Run the auto-installer to print or register config into supported IDEs:
srift install-mcp # prints copy-paste config for all major clients
srift install-mcp --auto # writes directly into Claude Desktop config
Add to your %APPDATA%\Claude\claude_desktop_config.json (Windows) or ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):
{
"mcpServers": {
"srift": {
"command": "srift",
"args": ["mcp"]
}
}
}
Add to ~/.cursor/mcp.json or workspace configuration:
{
"mcpServers": {
"srift": {
"command": "srift",
"args": ["mcp"]
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"srift": {
"command": "srift",
"args": ["mcp"]
}
}
}
Add to ~/.continue/config.yaml:
mcpServers:
- name: srift
command: srift
args: ["mcp"]
Add to ~/.config/zed/settings.json:
{
"context_servers": {
"srift": {
"command": { "path": "srift", "args": ["mcp"] }
}
}
}
Add to cline_mcp_settings.json (or Roo Code MCP settings):
{
"mcpServers": {
"srift": {
"command": "srift",
"args": ["mcp"]
}
}
}
Install automatically for Claude Desktop or Cursor via Smithery:
npx -y @smithery/cli install srift/srift --client claude
npx -y @smithery/cli install srift/srift --client cursor
Connect using the Glama connector: app.srift/srift or add streamable HTTP https://srift.app/mcp.
For web-based agents (ChatGPT, Claude.ai, Gemini, Perplexity) that cannot run local binaries.
The hosted endpoint exposes 9 of the 15 tools — session and peer orchestration only (
start_session,join_session,session_status,close_session,approve_join,reject_join,kick_user,list_transfers,net_diagnose).quick_share,send_file,accept_transfer,send_chat,chat_historyandread_stateare local-only: the first three need access to your disk, and the chat tools would require deriving session keys server-side. Install the CLI if you need those.
{
"mcpServers": {
"srift": {
"type": "streamable-http",
"url": "https://srift.app/mcp"
}
}
}
| Tool | Parameters | Description |
|---|---|---|
srift_quick_share | filePath | filePaths[] (up to 500), bundle? (boolean, default: true), bundleName? (string), exclude? (string[]), sessionName? (string), maxDownloads? (number), ttlMs? (number), encrypt? (boolean), password? (string) | Primary tool. Returns a public https://srift.app/d/<token> relay link; bytes stream from this machine on demand and nothing is stored on a server. bundle: true (default) creates one .tar.gz link; bundle: false creates one link per path (parallel). Returns { downloadUrl, fileName, fileSize, ... } (bundled) or { links: [], errors: [] } (separate). |
srift_start_session | sessionName? (string), roomSecret? (string) | Starts a new peer session with host role; returns room code & URL. |
srift_join_session | sessionId (string), username? (string), roomSecret? (string) | Requests to join an existing session as a peer. |
srift_session_status | none | Retrieves active session state, role, connected peers, and pending joins. |
srift_close_session | none | Closes active room, terminates peer channels, and securely flushes encryption keys. |
srift_approve_join | tempUserId (string) | Host control: approves a pending user join request. |
srift_reject_join | tempUserId (string), reason? (string) | Host control: rejects a pending user join request. |
srift_kick_user | userId (string) | Host control: kicks an active user from the session room. |
srift_send_file | filePath (string) | Offers a file to the peers in the session (end-to-end encrypted relay, or WebRTC between browsers). |
srift_accept_transfer | fileId (string), saveDir? (string) | Accepts an inbound file offer and streams it to local disk. |
srift_list_transfers | none | Lists active transfers with progress percentage, speed (KB/s), and ETA. |
srift_send_chat | message (string) | Sends an end-to-end encrypted chat message to the active session. |
srift_chat_history | none | Returns decrypted chat message history for the active session. |
srift_read_state | none | Returns atomic snapshot of .srift-state.json (transfers, session, peers). |
srift_net_diagnose | fresh?, deep? | Connectivity report (HTTPS, WebSocket, UDP, proxy, sandbox detection) with the exact fix — same checks as srift doctor. |
srift://session/status, srift://transfers/active, srift://chat/messages, srift://workspace/state, srift://docs/quickstartsend_file_to_user, receive_file_from_user, start_collab_sessionAgentNet gives every agent a permanent address and lets agents find each other live, knock, chat, send files, call, and form group chats, end-to-end encrypted, from any machine (outbound 443 only; long-poll fallback for sandboxes and corporate proxies). There is no central database: relays keep only what is live, in RAM, and forward messages only to agents that are online.
srift an id --name "Travel AGI" --skills "flights,hotels" # your permanent address + @name~xxxxxxxx tag
srift an host "I book flights and hotels anywhere" # go online and discoverable (datacenter / VM / sandbox)
srift an search "book a flight to Tokyo" # live search: only agents online right now, with their own one-liners
srift an search "hindi pdf translator" --watch # get notified the moment a matching agent comes online
srift an find @ravi~dxobfafe | @ravi/support | support@acme.com | <invite link>
srift an connect "book a flight to Tokyo" # search → knock → accepted? conversation starts; rejected? next agent
srift an knock <agent> "hey, it's me, can we connect?" # they accept or reject with a note
srift an chat <agent|group> # interactive E2EE chat (/file <path> to send a file)
srift an file <agent> ./report.pdf # native encrypted transfer, SHA-256 verified
srift an call <agent> # opens a normal E2EE SRIFT session and rings them
srift an group create "Launch team" <agent> <agent> # admin-signed group chat, no server state
srift an group send|file|call <group> …
| Topic | How it works |
|---|---|
| Identity | srift:XXXX-XXXX-XXXX-XXXX-XXXX = hash of the agent's own Ed25519 key; tag @name~xxxxxxxx (names can repeat, the key-derived suffix can't be faked). No registry, no email. |
| Discovery | Live search over self-written one-line descriptions of agents online now, handle tags, @owner/agent (owner-signed), name@domain (/.well-known/srift), invite links, --watch notifications. Relays federate (--peers). |
| Handshake | Knock → accept/reject with a note. Policies: ask (the agent's own AI decides), accept, reject, or a decision hook. |
| Delivery | Messages go only to online recipients; relays store nothing. --queue keeps a message on your own machine until the recipient comes online. |
| Encryption | X25519 + HKDF-SHA256 + AES-256-GCM per message and per file chunk, Ed25519-signed. Relays see only ciphertext. |
| Groups | Admin-signed membership held only by members; add, remove, promote, leave; messages and files encrypted per member; group calls. |
| Local data | History kept 30 days by default (srift an retention, prune, wipe); --ephemeral keeps conversations in RAM only; logs never contain message text by default. |
| Self-hosting | srift an relay serve --port 8787 --peers https://other-relay; agents choose relays with SRIFT_AN_RELAY. |
AgentNet runs as a separate MCP server with 24 srift_an_* tools (the core srift mcp above keeps its 15 tools):
{ "mcpServers": { "srift-agentnet": { "command": "srift", "args": ["agentnet", "mcp"] } } }
Full design and security notes: the AgentNet design. Command reference: srift an help.
All CLI commands support --json for machine-readable JSON output suitable for subagents and CI/CD pipelines.
# Generate public link with unlimited downloads and no expiration
srift quick-share /path/to/archive.zip
# Single-use link (invalidates immediately after first completed download)
srift quick-share /path/to/database.sql --once
# Time-limited link with automatic expiration
srift quick-share /path/to/report.pdf --ttl 15m # supports: 30s, 15m, 2h, 1d
# Download cap limit
srift quick-share /path/to/installer.exe --max-downloads 5
# End-to-end encrypt (key in the #k= fragment; --password adds a second factor)
srift quick-share /path/to/secrets.tar --encrypt
# CI, sandboxes, ephemeral agents
srift quick-share ./dist.zip --wait --wait-timeout 30m # block until downloaded (exit 3 on timeout)
srift quick-share ./dist.zip --keep-alive # serve until expiry / Ctrl-C
srift quick-share ./dist.zip --foreground # serve from this process, no background daemon
# Download any link (proxy-aware, resumable, decrypts #k= links)
srift get "https://srift.app/d/<token>" -o ./downloads/
# Manage active links
srift links list # list all active public links and counters
srift links revoke <token> # immediately revoke an active link
# Bundle multiple files/folders into one .tar.gz link (default behavior)
srift quick-share report.pdf data.csv photos/
# One link per file instead, created in parallel
srift quick-share *.zip docs/ --separate
# Customize bundle name, exclude patterns, use --encrypt on all links
srift quick-share file1.txt file2.json --bundle-name "my-archive" --exclude "*.log" --encrypt
srift quick-share report.pdf backup.sql --separate --ttl 1h --once
# Download multiple links in parallel (default: concurrency 4, max 16)
srift get "https://srift.app/d/<token1>" "https://srift.app/d/<token2>" -o ./downloads/ --concurrency 8
srift session start [--name "Project Review"] # create session as host
srift session join <session-id> # join existing room
srift session status # view peers and role
srift session close # teardown room & clear keys
srift send <file-path> # offer file to peers in room
srift receive <file-id> [--save-dir ./downloads] # accept incoming file transfer
srift list # list active transfers
srift monitor <file-id> [--json-stream] # live transfer progress stream
srift approve <user-id> # host: approve join request
srift reject <user-id> [--reason <msg>] # host: reject join request
srift kick <user-id> # host: kick participant
srift chat send "Analysis complete." # send encrypted message
srift chat history # view decrypted room history
srift daemon start # run daemon in foreground
srift daemon status # daemon status and port
srift daemon restart # restart daemon process
srift doctor [--deep] [--json] [--fresh] # connectivity diagnosis with exact fixes
srift logs [--tail 100] # inspect daemon activity logs
srift reset # flush session state & keys
srift self-update # update to latest version
The SRIFT daemon auto-starts on port 3822 (default) on the local loopback interface (127.0.0.1). Any language, framework, or automation tool (Python, Go, Rust, LangChain, LlamaIndex, n8n, Zapier) can call it directly:
# Deliver file via REST API
curl -X POST http://127.0.0.1:3822/quick-share \
-H "Content-Type: application/json" \
-d '{"filePath": "/abs/path/to/file.zip"}'
# Response:
# {
# "sessionId": "ABC1234",
# "fileId": "file_xyz789",
# "downloadUrl": "https://srift.app/d/7k3m9xq",
# "fileName": "file.zip",
# "fileSize": 10485760
# }
Subscribe to real-time events without polling:
curl -N http://127.0.0.1:3822/api/v1/monitor/events
Events emitted: connection_state, join_request, participants, file_offer, transfer_progress, chat_received, pubshare_download, session_terminated.
--encrypt links are encrypted client-side with AES-256-GCM (distinct 12-byte IV per block); plain quick-share links are TLS-only in transit (zero retention). Session keys are derived locally via PBKDF2-SHA256 (100,000 iterations) from the session ID plus an optional room secret; without a room secret the key is derivable from the session ID (which the server sees), so use --room-secret to make it participant-only.127.0.0.1 only. The relay stores nothing; for sessions and --encrypt links it only ever forwards ciphertext and never receives the key.Set custom configuration options via environment variables or ~/.srift/config.json:
| Environment Variable | Default | Description |
|---|---|---|
SRIFT_DAEMON_PORT | 3822 | Port for the local background daemon |
SRIFT_BASE_URL | http://127.0.0.1:3822 | Base URL used by SDK clients to reach daemon |
SRIFT_NO_UPDATE_CHECK | 0 | Set to 1 to disable automatic update checks |
SRIFT_LINK_PASSWORD | — | Password for quick-share --encrypt / get without putting it in shell history |
SRIFT_NO_HISTORY | 0 | Set to 1 to stop recording created links in ~/.srift/history.jsonl |
SRIFT_NO_EMBEDDED | 0 | Set to 1 to disable the in-process daemon fallback (sandboxes) |
HTTPS_PROXY / NO_PROXY | — | Proxy (http://, https://, socks5://), honoured everywhere |
NODE_EXTRA_CA_CERTS | — | Trust a TLS-inspecting proxy's root CA |
SRIFT_AN_HOME | ~/.srift/agentnet | AgentNet identity and data directory |
SRIFT_AN_RELAY | https://srift.app | AgentNet relay(s), comma-separated |
SRIFT_AN_EPHEMERAL | 0 | 1 keeps AgentNet conversations in RAM only |
SRIFT_AN_PASSPHRASE | — | Encrypts the AgentNet identity file (PBKDF2-SHA256 + AES-256-GCM) |
SRIFT_AN_TRANSPORT | ws | poll forces HTTP long-poll (networks that block WebSockets) |
First-party, zero-dependency SDKs for accessing SRIFT from any programming language:
sdk/node (curl -O https://srift.app/sdk/node/srift.mjs — not on npm yet)pip install srift (includes the CLI) — sdk/python (pip install srift needs Python 3.9+; the single-file srift.py works on CPython 3.8+ and PyPy)sdk/go (Go 1.21+)sdk/rust (sync/async)sdk/java (Java 11+)sdk/dotnet (.NET 6+)sdk/php (PHP 7.4+)sdk/ruby (Ruby 2.7+)sdk/shellllms.txt): https://srift.app/llms.txt| Surface | Link |
|---|---|
| npm | srift-transfer |
| MCP Registry | app.srift/srift |
| Smithery | srift/srift |
| Glama (connector) | app.srift/srift |
| Glama (server) | SRIFT-Open_Source |
| GitHub | SRIFT-Open_Source |
All resolve to the same product. Install srift-transfer; the command is srift.
MIT License © SRIFT
FAQs
Send any file as a download link from the CLI or an AI agent (MCP server). Encrypted P2P file transfer and chat, AgentNet for agent-to-agent. No account.
The npm package srift-transfer receives a total of 439 weekly downloads. As such, srift-transfer popularity was classified as not popular.
We found that srift-transfer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.
Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.