Model Context Protocol moderate risk

Ipfs

This MCP server wraps the `w3` CLI to manage data on the storacha.network via IPFS, enabling language models to interact with decentralized storage.

Connections & Capabilities

Connects To

GitHubDockerFilesystem

Capabilities

readwriteexecadmin

Quickstart

Install

npm install -g

Config

{
  "mcpServers": {
    "ipfs": {
      "command": "npx",
      "args": ["-y", "mcp-ipfs"],
      "env": {
        "W3_LOGIN_EMAIL": "your-email@example.com"
      }
    }
  }
}

Exposed MCP Tools (22)

safe

w3_login

Authenticates with the storacha.network using the provided email.

Authenticates the user, but doesn't directly modify data.

moderate

w3_reset

Resets the w3 configuration, potentially logging out the current user.

Resets configuration, may disrupt existing sessions.

safe

w3_account_ls

Lists the accounts associated with the logged-in user.

Read-only operation, no data modification.

safe

w3_space_ls

Lists the available spaces on storacha.network.

Read-only operation, no data modification.

moderate

w3_space_use

Selects a specific space to work with.

Changes the active space, potentially affecting subsequent operations.

safe

w3_space_info

Retrieves information about a specific space.

Read-only operation, no data modification.

moderate

w3_space_add

Adds a new space to the account.

Creates a new space, consuming resources.

moderate

w3_space_provision

Provisions a space, potentially incurring costs.

moderate

w3_up

Uploads data to storacha.network.

Writes data to storage, potentially overwriting existing data.

safe

w3_ls

Lists the contents of a space.

Read-only operation, no data modification.

critical

w3_rm

Removes data from storacha.network.

Deletes data, potentially causing irreversible data loss.

safe

w3_open

Generates a w3s.link URL for sharing data.

Creates a shareable link, but doesn't modify data.

moderate

w3_delegation_create

Creates a delegation for accessing resources.

Creates a delegation, granting access to resources.

safe

w3_delegation_ls

Lists existing delegations.

Read-only operation, no data modification.

moderate

w3_delegation_revoke

Revokes a delegation, removing access.

Revokes access, potentially disrupting workflows.

moderate

w3_proof_add

Adds a proof to the network.

Adds a proof, potentially affecting network state.

safe

w3_proof_ls

Lists existing proofs.

Read-only operation, no data modification.

moderate

w3_key_create

Creates a new key.

Creates a new key, which can be used for authentication.

moderate

w3_bridge_generate_tokens

Generates bridge tokens.

Generates tokens, which can be used for accessing resources.

safe

w3_plan_get

Retrieves the current account plan.

Read-only operation, no data modification.

moderate

w3_coupon_create

Creates a coupon.

Creates a coupon, potentially affecting billing.

safe

w3_usage_report

Generates a usage report.

Read-only operation, no data modification.

Safety Assessment

This server provides access to storacha.network via IPFS. It's relatively safe for read operations, but write and delete operations pose a moderate risk, especially if the server is misconfigured or the underlying `w3` CLI has vulnerabilities.

Wraps the `w3` CLI, limiting direct system access.
MCP provides a layer of abstraction and control.
Authentication required via `w3 login`.
Tool-based access control through MCP.

Relies on the security of the `w3` CLI and storacha.network.
Requires `W3_LOGIN_EMAIL` environment variable, potential for exposure.
Can perform write and delete operations on storacha.network.
Improperly configured paths in Docker can lead to data loss or corruption.