Server data from the Official MCP Registry
Privacy-first file tools for AI agents — PDF & image ops, metadata scrubbing, background removal.
About
Privacy-first file tools for AI agents — PDF & image ops, metadata scrubbing, background removal.
Security Report
filewash is a well-designed privacy-first file-processing MCP server with appropriate authentication, sensible permissions, and clean code practices. The architecture processes files in-memory only, never logging contents. Minor code quality improvements are recommended around error handling granularity and input validation edge cases, but no security vulnerabilities were identified. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
7 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-cassilup-filewash": {
"args": [
"-y",
"@fixpixel/filewash-api"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
filewash — privacy-first file tools for AI agents
The file-processing layer for agents and apps that can't send files to a third party. Compress, convert, resize, merge/split PDFs, strip metadata, and remove backgrounds — exposed as an MCP server, a metered REST API, and an npm SDK. Zero-retention by default: files are processed in memory and never stored or logged.
Built from filewash.app's client-side WASM tools. Same logic, now callable by your agents.
Why this exists
Every other file-tools API and MCP server is a wrapper around an upload-to-server service. That's a non-starter for legal, healthcare, finance, and any GDPR-bound workflow — and it's a liability when you're piping documents into an LLM. filewash is the one built around not keeping your files, with two tools nobody else ships as an MCP: background removal and metadata scrubbing.
MCP server (Claude Desktop, Cursor, Claude Code)
// claude_desktop_config.json → mcpServers
{
"filewash": { "command": "node", "args": ["/path/to/filewash-api/src/mcp/server.js"] }
}
Your agent now has 11 tools. Ask it: "strip the location metadata from these photos before I upload them" or "merge these contracts and rotate the scanned pages."
REST API
# discover
curl https://api.filewash.app/v1/tools
# strip EXIF/GPS from a photo (returns the cleaned image)
curl -X POST https://api.filewash.app/v1/tools/image_strip_metadata \
-H "Authorization: Bearer $FILEWASH_KEY" \
-F 'files=@photo.jpg' -o clean.jpg
# merge PDFs
curl -X POST https://api.filewash.app/v1/tools/pdf_merge \
-H "Authorization: Bearer $FILEWASH_KEY" \
-F 'files=@a.pdf' -F 'files=@b.pdf' -o merged.pdf
Every response carries X-Filewash-Meta (operation result) and X-Filewash-Quota-Remaining.
Tools
| Tool | Category | What it does |
|---|---|---|
pdf_merge | Merge PDFs into one | |
pdf_split | Extract specific pages | |
pdf_rotate | Rotate pages by 90° | |
pdf_strip_metadata | privacy | Remove author/title/producer/dates |
image_compress | image | Lossy re-encode at a target quality |
image_convert | image | jpeg ↔ png ↔ webp ↔ avif |
image_resize | image | Resize (never upscales) |
image_strip_metadata | privacy | Strip EXIF/GPS/ICC/XMP |
image_remove_background | image | Remove background → transparent PNG (local AI model, no upload) |
image_watermark | image | Tile a text watermark |
qr_generate | generate | QR code PNG from text/URL |
Pricing (planned)
| Plan | Price | Quota | Retention |
|---|---|---|---|
| Free | $0 | 100 ops/mo | in-memory |
| Pro | ~$19/mo | 10,000 ops/mo | in-memory |
| Business | ~$99/mo | unlimited | zero-retention guarantee + audit log + BAA |
Run locally
npm install
npm run test:engine # 10 tools, end-to-end, no browser
npm run mcp # stdio MCP server
npm run rest # REST API on :8787 (try key "demo")
Privacy
No file is written to disk by the REST API; the MCP server writes output only to the path you pass. No file contents are logged. The Business tier adds a contractual zero-retention guarantee and audit logging.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption