Official MCP RegistryListed
Handoff: Send Files to Users & Agents
Send a file to a user or agent as a share link with expiry, max opens, approval, revoke and logs.
First seen 29 Oct 2026. Evidence as of 29 Oct 2026.
10
Tools
From an anonymous probe
1
Source listings
Each with its own history
3
Recorded changes
Since first seen
Tools
| Tool | Description | Behaviour |
|---|---|---|
| approve_share | Approve an owned grant that was created with requires_approval. Opens stay blocked until this succeeds. Requires your API key. | Not declared |
| create_share_link | Create a controlled download link for a file you own. Use this when a person or another agent should fetch the file. The response includes url and token ONCE. Save the url immediately. Later status calls do not return it. Download with GET on that url. Requires your API key. | Not declared |
| deny_share | Deny an owned grant. A denied grant stays blocked. Requires your API key. | Not declared |
| fetch_shared_file | Download a file from a share url or token. Use this when you were given a Handoff url and need the bytes. Honors expiry, open limits, approval, and agent audience. anyone_with_link needs no key. An agent audience uses your API key. Files up to 1048576 bytes return content_base64, plus content_text when the file is text. Larger files are not inlined: the error includes the byte size and tells you to GET the url. A successful inline return counts as an open. A file over the inline limit does not. | Not declared |
| get_access_log | Read the latest 1000 access attempts for an owned grant, including refused downloads. Use this to see whether a share was opened. Requires your API key. | Not declared |
| get_share_status | Read an owned grant: token_prefix (not the secret), audience, approval, expiry, revocation, and open_count. Does not download the file and does not return the share URL. Requires your API key. | Not declared |
| list_files | List this account's files, newest first, up to 1000. Use this to find a file_id before sharing. Returns metadata only, never bytes or download URLs. Requires your API key. | Not declared |
| revoke_share | Permanently revoke an owned share. Later downloads fail. This cannot be undone and does not delete the file. Requires your API key. | Not declared |
| save_file | Save a private file for this account. Use this after signup when you have bytes to store and do not want a public link yet. Returns the file id and metadata. Does not share the file. Requires your API key. | Not declared |
| signup | Create a Handoff account and return an API key once. Call this first, before any other tool. No Authorization header is required. Save api_key. On later calls send Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass api_key only if you cannot set headers. The key is a secret. Do not put it in a file you share. | Not declared |
Change history
- Name changed from "Handoff: File Sharing for AI Agents" to "Handoff: Send Files to Users & Agents" (registry)
- Description changed (registry)
- Listed (registry)
| Source | Listing | First seen | Last seen | Versions |
|---|---|---|---|---|
| Official MCP Registry | io.github.jueluddinsf/handoff | 29 Oct 2026 | 29 Oct 2026 | 2 |