Koskamo

qURL MCP

An MCP server that enables AI agents to mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for private resources, allowing secure access to internal apps and APIs without public exposure.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

qURL MCP logo, by LayerVCommunity listingLocal stdioSource reviewed; not executedPublished by LayerV
Vendor documentation

What you can do with it

  • Mint temporary access links for private resources
  • Resolve qURLs to access protected endpoints
  • Audit and manage access link expiration
  • Rotate access credentials for agents

Source and maintenance

Community listingRegistry 0.9.0
Maintenance checked

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

@layervai/qurl-mcp 0.9.0

npm
@layervai/qurl-mcp package definition
{
  "version": "0.9.0",
  "transport": "stdio",
  "identifier": "@layervai/qurl-mcp",
  "registryType": "npm",
  "environmentVariables": [
    {
      "name": "QURL_API_KEY",
      "format": "string",
      "description": "Optional. Without it, the tools run through the local qURL CLI (qurl), which needs no account. With it, the tools use the qURL API: a key with qurl:read, qurl:write, and/or qurl:resolve scopes from https://layerv.ai."
    },
    {
      "name": "QURL_API_URL",
      "format": "string",
      "default": "https://api.layerv.ai",
      "description": "qURL API base URL. Defaults to https://api.layerv.ai. Override only for testing against a non-production qURL backend."
    },
    {
      "name": "QURL_CONNECTOR_URL",
      "format": "string",
      "description": "Connector base URL used by local-file, file-data, and text-to-PDF upload tools before minting a qURL."
    },
    {
      "name": "QURL_LINK_HOSTS",
      "format": "string",
      "description": "Optional comma-separated exact hostnames or IPs for uploaded-file links. No schemes, ports, or wildcards. Blank values retain any file-configured policy."
    },
    {
      "name": "QURL_MCP_CONFIG",
      "format": "string",
      "description": "Optional path to a shared qURL MCP config file. Both stdio and HTTP modes can read SMTP, connector, and default API settings from this file."
    },
    {
      "name": "MCP_MAX_UPLOAD_FILE_DATA_BYTES",
      "format": "string",
      "default": "10mb",
      "description": "Maximum decoded/local upload size. Accepts bytes or units such as 10mb; capped at 100mb."
    },
    {
      "name": "QURL_SMTP_HOST",
      "format": "string",
      "description": "SMTP hostname for optional qURL link delivery."
    },
    {
      "name": "QURL_SMTP_PORT",
      "format": "string",
      "description": "SMTP port for optional qURL link delivery."
    },
    {
      "name": "QURL_SMTP_SECURE",
      "format": "string",
      "description": "Whether SMTP uses an implicit TLS connection (true/false)."
    },
    {
      "name": "QURL_SMTP_USERNAME",
      "format": "string",
      "description": "SMTP authentication username."
    },
    {
      "name": "QURL_SMTP_PASSWORD",
      "format": "string",
      "description": "SMTP authentication password or app-specific credential."
    },
    {
      "name": "QURL_SMTP_FROM_EMAIL",
      "format": "string",
      "description": "Validated sender email address for qURL delivery."
    },
    {
      "name": "QURL_SMTP_FROM_NAME",
      "format": "string",
      "description": "Optional sender display name for qURL delivery."
    },
    {
      "name": "QURL_SMTP_ALLOWED_RECIPIENTS",
      "format": "string",
      "description": "Optional comma-separated exact recipient allowlist."
    },
    {
      "name": "QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS",
      "format": "string",
      "description": "Optional comma-separated recipient-domain allowlist."
    },
    {
      "name": "QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE",
      "format": "string",
      "default": "10",
      "description": "Maximum recipients in one delivery request (default 10)."
    },
    {
      "name": "QURL_SMTP_MAX_RECIPIENTS_PER_HOUR",
      "format": "string",
      "default": "100",
      "description": "Maximum attempted recipients per qURL key per fixed hourly window (default 100)."
    },
    {
      "name": "QURL_MCP_FEEDBACK",
      "format": "string",
      "default": "on",
      "description": "Set to off to hide and disable outbound LayerV product feedback. Default on. Feedback is sent only by an explicit submit_feedback tool call."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.
Cursor configuration
{
  "mcpServers": {
    "qurl-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@layervai/qurl-mcp@0.9.0"
      ],
      "env": {
        "QURL_API_KEY": "<YOUR_QURL_API_KEY>",
        "QURL_API_URL": "<YOUR_QURL_API_URL>",
        "QURL_CONNECTOR_URL": "<YOUR_QURL_CONNECTOR_URL>",
        "QURL_LINK_HOSTS": "<YOUR_QURL_LINK_HOSTS>",
        "QURL_MCP_CONFIG": "<YOUR_QURL_MCP_CONFIG>",
        "MCP_MAX_UPLOAD_FILE_DATA_BYTES": "<YOUR_MCP_MAX_UPLOAD_FILE_DATA_BYTES>",
        "QURL_SMTP_HOST": "<YOUR_QURL_SMTP_HOST>",
        "QURL_SMTP_PORT": "<YOUR_QURL_SMTP_PORT>",
        "QURL_SMTP_SECURE": "<YOUR_QURL_SMTP_SECURE>",
        "QURL_SMTP_USERNAME": "<YOUR_QURL_SMTP_USERNAME>",
        "QURL_SMTP_PASSWORD": "<YOUR_QURL_SMTP_PASSWORD>",
        "QURL_SMTP_FROM_EMAIL": "<YOUR_QURL_SMTP_FROM_EMAIL>",
        "QURL_SMTP_FROM_NAME": "<YOUR_QURL_SMTP_FROM_NAME>",
        "QURL_SMTP_ALLOWED_RECIPIENTS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENTS>",
        "QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_HOUR": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_HOUR>",
        "QURL_MCP_FEEDBACK": "<YOUR_QURL_MCP_FEEDBACK>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.
Cline configuration
{
  "mcpServers": {
    "qurl-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@layervai/qurl-mcp@0.9.0"
      ],
      "env": {
        "QURL_API_KEY": "<YOUR_QURL_API_KEY>",
        "QURL_API_URL": "<YOUR_QURL_API_URL>",
        "QURL_CONNECTOR_URL": "<YOUR_QURL_CONNECTOR_URL>",
        "QURL_LINK_HOSTS": "<YOUR_QURL_LINK_HOSTS>",
        "QURL_MCP_CONFIG": "<YOUR_QURL_MCP_CONFIG>",
        "MCP_MAX_UPLOAD_FILE_DATA_BYTES": "<YOUR_MCP_MAX_UPLOAD_FILE_DATA_BYTES>",
        "QURL_SMTP_HOST": "<YOUR_QURL_SMTP_HOST>",
        "QURL_SMTP_PORT": "<YOUR_QURL_SMTP_PORT>",
        "QURL_SMTP_SECURE": "<YOUR_QURL_SMTP_SECURE>",
        "QURL_SMTP_USERNAME": "<YOUR_QURL_SMTP_USERNAME>",
        "QURL_SMTP_PASSWORD": "<YOUR_QURL_SMTP_PASSWORD>",
        "QURL_SMTP_FROM_EMAIL": "<YOUR_QURL_SMTP_FROM_EMAIL>",
        "QURL_SMTP_FROM_NAME": "<YOUR_QURL_SMTP_FROM_NAME>",
        "QURL_SMTP_ALLOWED_RECIPIENTS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENTS>",
        "QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_HOUR": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_HOUR>",
        "QURL_MCP_FEEDBACK": "<YOUR_QURL_MCP_FEEDBACK>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.
VS Code configuration
{
  "servers": {
    "qurl-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@layervai/qurl-mcp@0.9.0"
      ],
      "env": {
        "QURL_API_KEY": "<YOUR_QURL_API_KEY>",
        "QURL_API_URL": "<YOUR_QURL_API_URL>",
        "QURL_CONNECTOR_URL": "<YOUR_QURL_CONNECTOR_URL>",
        "QURL_LINK_HOSTS": "<YOUR_QURL_LINK_HOSTS>",
        "QURL_MCP_CONFIG": "<YOUR_QURL_MCP_CONFIG>",
        "MCP_MAX_UPLOAD_FILE_DATA_BYTES": "<YOUR_MCP_MAX_UPLOAD_FILE_DATA_BYTES>",
        "QURL_SMTP_HOST": "<YOUR_QURL_SMTP_HOST>",
        "QURL_SMTP_PORT": "<YOUR_QURL_SMTP_PORT>",
        "QURL_SMTP_SECURE": "<YOUR_QURL_SMTP_SECURE>",
        "QURL_SMTP_USERNAME": "<YOUR_QURL_SMTP_USERNAME>",
        "QURL_SMTP_PASSWORD": "<YOUR_QURL_SMTP_PASSWORD>",
        "QURL_SMTP_FROM_EMAIL": "<YOUR_QURL_SMTP_FROM_EMAIL>",
        "QURL_SMTP_FROM_NAME": "<YOUR_QURL_SMTP_FROM_NAME>",
        "QURL_SMTP_ALLOWED_RECIPIENTS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENTS>",
        "QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_HOUR": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_HOUR>",
        "QURL_MCP_FEEDBACK": "<YOUR_QURL_MCP_FEEDBACK>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.
Claude Desktop configuration
{
  "mcpServers": {
    "qurl-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@layervai/qurl-mcp@0.9.0"
      ],
      "env": {
        "QURL_API_KEY": "<YOUR_QURL_API_KEY>",
        "QURL_API_URL": "<YOUR_QURL_API_URL>",
        "QURL_CONNECTOR_URL": "<YOUR_QURL_CONNECTOR_URL>",
        "QURL_LINK_HOSTS": "<YOUR_QURL_LINK_HOSTS>",
        "QURL_MCP_CONFIG": "<YOUR_QURL_MCP_CONFIG>",
        "MCP_MAX_UPLOAD_FILE_DATA_BYTES": "<YOUR_MCP_MAX_UPLOAD_FILE_DATA_BYTES>",
        "QURL_SMTP_HOST": "<YOUR_QURL_SMTP_HOST>",
        "QURL_SMTP_PORT": "<YOUR_QURL_SMTP_PORT>",
        "QURL_SMTP_SECURE": "<YOUR_QURL_SMTP_SECURE>",
        "QURL_SMTP_USERNAME": "<YOUR_QURL_SMTP_USERNAME>",
        "QURL_SMTP_PASSWORD": "<YOUR_QURL_SMTP_PASSWORD>",
        "QURL_SMTP_FROM_EMAIL": "<YOUR_QURL_SMTP_FROM_EMAIL>",
        "QURL_SMTP_FROM_NAME": "<YOUR_QURL_SMTP_FROM_NAME>",
        "QURL_SMTP_ALLOWED_RECIPIENTS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENTS>",
        "QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS": "<YOUR_QURL_SMTP_ALLOWED_RECIPIENT_DOMAINS>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_MESSAGE>",
        "QURL_SMTP_MAX_RECIPIENTS_PER_HOUR": "<YOUR_QURL_SMTP_MAX_RECIPIENTS_PER_HOUR>",
        "QURL_MCP_FEEDBACK": "<YOUR_QURL_MCP_FEEDBACK>"
      }
    }
  }
}

Let your agent find its tools

Find servers like qURL MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.