bots.st/handoff-send-files-to-users-agents
Handoff: Send Files to Users & Agents
Create expiring share links with logs
4046 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 14
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://hand-off.space/mcp
What it can do
| Tool | What it says it does |
|---|---|
approve_share | Approve an owned grant that was created with requires_approval. Opens stay blocked until this succeeds. Requires your API key. |
create_share_link | Create a controlled download link for a file you own. Use this when a person or another agent should fetch the file. The response includes url and token ONCE, plus expires_at and max_opens. Save the url immediately. Later status calls do not return it. When expires_in_hours is omitted, the link… |
delete_file | Delete a file you own. The bytes are removed and existing share links stop working. Requires your API key. |
deny_share | Deny an owned grant. A denied grant stays blocked. Requires your API key. |
fetch_shared_file | Download a file from a share url or token. Use this when you were given a Handoff url and need the bytes. Honors expiry, open limits, approval, and agent audience. anyone_with_link needs no key. An agent audience uses your API key. Files up to 1048576 bytes return content_base64, plus content_text… |
get_access_log | Read the latest 1000 access attempts for an owned grant, including refused downloads. Use this to see whether a share was opened. Requires your API key. |
get_share_status | Read an owned grant: token_prefix (not the secret), audience, approval, expiry, revocation, and open_count. Does not download the file and does not return the share URL. Requires your API key. |
list_files | List this account's files, newest first, up to 1000. Use this to find a file_id before sharing. Returns metadata only, never bytes or download URLs. Requires your API key. |
list_shares | List grants you own. Pass file_id to limit the list to one file. Returns grant_id, status, open_count, max_opens, expires_at, and audience. Does not return tokens or download urls. Requires your API key. |
revoke_share | Permanently revoke an owned share. Later downloads fail. This cannot be undone and does not delete the file. Requires your API key. |
save_file | Save a private file for this account. Pass name and content_text or content_base64. Returns the file id and metadata. Does not share the file. Requires your API key. |
share_file | Share a file in one call and get a download link. Pass name and content_text (or content_base64). Works without an API key: if none is sent, a new account is created and its api_key is returned once; save it to revoke the link or read the access log later. Default link: anyone with the link… |
signup | Create a Handoff account and return an API key once. No Authorization header is required. Save api_key. On later calls send Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass api_key only if you cannot set headers. share_file can create this key for you. The… |
update_share | Set when an owned share expires. expires_in_hours is measured from now. Example: 168 for 7 days. Does not return the token. Requires your API key. |
In its maker's words
Send a file to a user or agent as a share link with expiry, max opens, approval, revoke and logs.
- Website
- hand-off.space
- Source
- github.com/jueluddinsf/handoff-mcp
- Publisher
- jueluddinsf (2 listings in the registry)
- Listed from
- the official MCP Registry as
io.github.jueluddinsf/handoff - Version
- 1.0.1, updated 29 Oct 2026
- Kinds of work
- Documents and files, Browser and automation, Security and trust
The domain it lives on
- hand-off.space
- registered 29 Oct 2026 (1 months ago), at Name.com, Inc., its home page is a working site
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 4046 ms | |
| Answered | 3747 ms | |
| Answered | 1570 ms |
Next door
Is this your bot? Claim its address to add a verified badge and keep the listing current.