io.github.colapsis/transfa

Official

by colapsis · JavaScript

Upload any file, get a signed link. SHA-256 verified, TTL-enforced, no account required.

MCP Server: io.github.colapsis/transfa

The io.github.colapsis/transfa MCP server supports developer file sharing by uploading any file and receiving a signed link. It verifies uploads with SHA-256 and enforces a TTL. The process requires no account, and its tooling can be used via CLI-oriented workflows and integrations.

🛠️ Key Features

Upload any file
Return a signed link
SHA-256 verification
TTL enforced
No account required

🚀 Use Cases

File sharing for developers and AI agents
File transfer automation in CI/CD
Self-hostable workflows using REST API patterns
Integrating with Node.js and CLI tooling

⚡ Developer Benefits

Simple CLI-based upload flow
Shareable signed links for downstream access
Content integrity via SHA-256
Time-bounded access via TTL

⚠️ Limitations

Based on available data: no further details on account support, authentication options, or maximum file/link policies.

Topics

clifile-sharingmcpnodejscicddevopsfile-transferrest-apiself-hostablesha256

README.md10 KBView on GitHub

Dead-simple file sharing for developers and AI agents.
Upload with one command. Share with a link. No account required.

node version

code

$ tf upload model.gguf
✓ Uploaded  model.gguf  (4.2 GB)  →  https://transfa.sh/f/xK9mRp
  SHA-256    a3f8c2...d91b
  Expires    in 7 days

Why transfa?

Most file-sharing tools are built for humans clicking through UIs. transfa is built for the terminal — designed to be called from shell scripts, CI pipelines, and AI agents (Claude, GPT, Cursor, etc.) that need to move files without friction.

No signup required — just install and upload
Any format, any size — up to 100 GB; ML models, archives, binaries, code, media
Built for agents — JSON API, SHA-256 checksums, idempotent uploads
Password protection, download limits, TTL — full control over every link
100+ formats detected — MIME type auto-detection including .gguf, .safetensors, .parquet, .ipynb, and more

Install

Node.js / CLI

bash

npm install -g transfa

Python SDK

bash

pip install transfa

MCP server (Claude, Cursor, any MCP-compatible agent)

bash

npx -y transfa-mcp

Or use the raw install script:

bash

curl -fsSL https://transfa.sh/install | sh

Quick start

bash

# Upload a file (no account needed)
tf upload photo.jpg

# Upload with custom TTL and password
tf upload secret.zip --ttl 24h --password hunter2

# Upload and pipe the URL to clipboard
tf upload bundle.tar.gz | grep url | awk '{print $2}' | pbcopy

# Download a file
tf download https://transfa.sh/f/xK9mRp

# List your uploads
tf list

# Delete an upload
tf delete xK9mRp

GitHub Actions

Upload build artifacts, coverage reports, and any CI output straight from your workflow:

yaml

- uses: colapsis/transfa-action@v1
  id: upload
  with:
    file: ./dist/report.pdf
    api-key: ${{ secrets.TRANSFA_API_KEY }}

- run: echo "${{ steps.upload.outputs.agent-link }}" >> $GITHUB_STEP_SUMMARY

All five outputs are available after the step: id, agent-link, human-link, sha256, expires-at.

See colapsis/transfa-action for the full input reference and more examples (password-protected links, self-hosted instances, single-download limits).

API

transfa is fully REST. Every operation the CLI does, you can do with curl or any HTTP client.

Upload

bash

curl -X POST https://transfa.sh/api/upload \
  -H "Authorization: Bearer $TF_KEY" \
  -F "file=@model.gguf" \
  -F "ttl=7d"

json

{
  "id": "xK9mRp",
  "url": "https://transfa.sh/f/xK9mRp",
  "download_url": "https://transfa.sh/api/download/xK9mRp",
  "filename": "model.gguf",
  "bytes": 4512345678,
  "sha256": "a3f8c2...d91b",
  "expires_at": "2026-05-21T12:00:00.000Z"
}

Upload options (form fields or headers):

Field	Header	Description
`ttl`	`X-Transfa-TTL`	Expiry: `1h`, `24h`, `7d`, `30d`
`password`	—	Password-protect the download link
`max_downloads`	—	Burn after N downloads
`filename`	`X-Transfa-Filename`	Override the stored filename

Download

bash

# Direct download (no auth required)
curl -L https://transfa.sh/api/download/xK9mRp -o model.gguf

# Password-protected
curl -L "https://transfa.sh/api/download/xK9mRp?password=hunter2" -o secret.zip

File info

bash

curl https://transfa.sh/api/download/info/xK9mRp

json

{
  "id": "xK9mRp",
  "filename": "model.gguf",
  "bytes": 4512345678,
  "sha256": "a3f8c2...d91b",
  "mime_type": "application/octet-stream",
  "download_count": 3,
  "has_password": false,
  "expires_at": "2026-05-21T12:00:00.000Z",
  "active": true
}

List uploads

bash

curl https://transfa.sh/api/upload \
  -H "Authorization: Bearer $TF_KEY"

Delete

bash

curl -X DELETE https://transfa.sh/api/upload/xK9mRp \
  -H "Authorization: Bearer $TF_KEY"

Supported formats

Over 100 file types with correct MIME detection — including types not in standard MIME databases:

Category	Formats
ML models	`.gguf` `.ggml` `.safetensors` `.onnx` `.pt` `.pth` `.pkl` `.ckpt` `.tflite` `.mlmodel` `.lora`
Data science	`.parquet` `.arrow` `.feather` `.h5` `.hdf5` `.npz` `.npy` `.lance` `.duckdb` `.ipynb`
Code	`.py` `.rs` `.go` `.ts` `.kt` `.swift` `.scala` `.cu` `.sol` `.vy` `.elm` `.zig`
Archives	`.zip` `.tar` `.gz` `.bz2` `.xz` `.7z` `.zst`
3D / Design	`.glb` `.gltf` `.obj` `.stl` `.usdz` `.blend` `.fig` `.sketch` `.psd`
Media	`.avif` `.webp` `.heic` `.jxl` `.opus` `.flac` `.webm` `.av1`
Config	`.toml` `.hcl` `.tf` `.tfvars` `.nix` `.dhall` `.lock` `.env`
Everything else	`.wasm` `.sqlite` `.db` `.pem` `.crt` `.p12` + all standard types

Any other format is accepted as application/octet-stream — nothing is blocked.

Plans

	Guest	Free	Pro	Team
Max file size	10 MB	500 MB	50 GB	100 GB
Uploads / day	5	20	500	5,000
Max TTL	24h	48h	30 days	180 days
Storage	—	—	Unlimited	Unlimited
Price	Free	Free	$12/mo	$48/mo
Trial	—	—	3-day free trial	3-day free trial

→ See full pricing

MCP server (Claude, Cursor, and any MCP-compatible agent)

transfa ships an MCP server that lets Claude, Cursor, and any MCP-compatible agent upload and share files autonomously — no shell commands, no infrastructure setup.

bash

npx -y transfa-mcp

Claude Desktop config

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

json

{
  "mcpServers": {
    "transfa": {
      "command": "npx",
      "args": ["-y", "transfa-mcp"],
      "env": {
        "TRANSFA_API_KEY": "your-api-key"
      }
    }
  }
}

The API key is optional — the server works in guest mode without one (10 MB / 24h limit).

Available MCP tools

Tool	Description
`upload`	Upload a file from the local filesystem. Returns `agent_link` (direct URL), `human_link` (share page), and `sha256`. Accepts `run_id`, `step`, `consumer`, `intent` for provenance.
`file_info`	Get metadata about an upload — filename, size, SHA-256, expiry, download count, provenance fields.
`list_uploads`	List recent uploads (requires API key).
`delete_upload`	Delete an upload immediately.
`run_artifacts`	Get all files uploaded under a `run_id` — the full provenance manifest for a pipeline run or agent session.

Example agent workflow

When Claude has transfa as an MCP tool, it can:

Generate a report → call upload → get a link → paste the link in the conversation
Pass a file to another agent by sharing the agent_link
Clean up with delete_upload when done

Python SDK

python

import transfa

# Upload
result = transfa.upload("model.pt", ttl="24h", run_id="run-42", artifact=True)
print(result.url, result.sha256)

# Download (SHA-256 verified)
transfa.download(result.id, output="model.pt")

# Provenance manifest for a run
manifest = transfa.run_artifacts("run-42")

# Async
async with transfa.AsyncClient() as client:
    result = await client.upload("model.pt")

See python/README.md for the full API reference.

Use with AI agents (script/subprocess)

transfa is also designed to be called from shell scripts, CI pipelines, and agents that prefer subprocess calls:

python

import subprocess, json

result = subprocess.run(
    ["tf", "upload", "output.csv"],
    capture_output=True, text=True
)
data = json.loads(result.stdout)
print(data["url"])  # https://transfa.sh/f/xK9mRp

Or use the REST API directly — no SDKs, no auth flows, just HTTP.

Self-hosting

bash

git clone https://github.com/colapsis/transfa.git
cd transfa
cp .env.example .env          # fill in your keys
npm install --prefix server
npm install --prefix cli
npm run build --prefix frontend
pm2 start ecosystem.config.cjs

Requirements: Node.js 18+, nginx (for SSL/proxy)

See nginx/transfa.conf for a production-ready nginx config.

Environment variables

Variable	Description
`PORT`	Server port (default: `3001`)
`BASE_URL`	Public URL e.g. `https://transfa.sh`
`STRIPE_SECRET_KEY`	Stripe secret key for billing
`STRIPE_WEBHOOK_SECRET`	Stripe webhook signing secret
`STRIPE_PRO_PRICE_ID`	Stripe price ID for Pro plan
`STRIPE_TEAM_PRICE_ID`	Stripe price ID for Team plan

Security

Found a vulnerability? Please email tansfa.sh@gmail.com or see SECURITY.md.

Do not open a public issue for security reports.

License

Install

Configuration

Environment variables

TRANSFA_API_KEYsecret

Your Transfa API key. Free at transfa.sh — leave empty for guest mode (10 MB limit).

TRANSFA_BASE_URL

Custom Transfa instance URL for self-hosted deployments. Defaults to https://transfa.sh

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "transfa": {
      "command": "npx",
      "args": [
        "-y",
        "transfa-mcp@1.0.1"
      ],
      "env": {
        "TRANSFA_API_KEY": "<YOUR_TRANSFA_API_KEY>",
        "TRANSFA_BASE_URL": "<YOUR_TRANSFA_BASE_URL>"
      }
    }
  }
}

MCP Server: io.github.colapsis/transfa

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

Why transfa?

Install

Quick start

GitHub Actions

API

Upload

Download

File info

List uploads

Delete

Supported formats

Plans

MCP server (Claude, Cursor, and any MCP-compatible agent)

Claude Desktop config

Available MCP tools

Example agent workflow

Python SDK

Use with AI agents (script/subprocess)

Self-hosting

Environment variables

Security

License

Install

Configuration

Related servers