---
bezeichner: "io.github.Nizoka/zipnative-mcp"
art: "mcp_server"
slug: "io-github-nizoka-zipnative-mcp"
paketkoordinate: "npm:zipnative-mcp"
status: "aktiv"
homepage: "https://github.com/Nizoka/zipnative-mcp#readme"
erhebungsstand: "2026-10-10T01:17:01.464Z"
namensraum: "io.github.Nizoka"
registerseite: "https://tracevero.de/mcp/io-github-nizoka-zipnative-mcp"
abgerufen_am: "2026-10-10"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: true
quelloffen_einsehbar: true
roh_beschreibung: "ZIP MCP server: create, inspect, verify, extract securely, modify without recompression. 13 tools"
version: "1.0.0"
roh_umgebungsvariablen: "ZIPNATIVE_MCP_OUTPUT_DIR, ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_PORT, ZIPNATIVE_MCP_HTTP_TOKEN, ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES, ZIPNATIVE_MCP_MAX_ENTRIES, ZIPNATIVE_MCP_WORKERS"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/Nizoka/zipnative-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: "ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_OUTPUT_DIR"
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-07"
roh_aktualisiert_am: "2026-09-07"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "zipnative-mcp"
roh_paketversionen: "1.0.0"
roh_laufzeithinweise: "npx"
roh_umgebungsformate: "filepath, number"
roh_umgebungsbeschreibungen: "ZIPNATIVE_MCP_CACHE_DIR=Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue. · ZIPNATIVE_MCP_HTTP_TOKEN=Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged. · ZIPNATIVE_MCP_MAX_ENTRIES=Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start. · ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES=Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED. · ZIPNATIVE_MCP_OUTPUT_DIR=Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache). · ZIPNATIVE_MCP_PORT=Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set. · ZIPNATIVE_MCP_WORKERS=Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"zipnative-mcp\",\"version\":\"1.0.0\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"ZIPNATIVE_MCP_OUTPUT_DIR\",\"description\":\"Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache).\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_CACHE_DIR\",\"description\":\"Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_PORT\",\"description\":\"Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_HTTP_TOKEN\",\"description\":\"Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged.\",\"required\":false,\"secret\":true},{\"name\":\"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES\",\"description\":\"Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_MAX_ENTRIES\",\"description\":\"Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"ZIPNATIVE_MCP_WORKERS\",\"description\":\"Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start.\",\"format\":\"number\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}"
---

# zipnative MCP — ZIP creation, inspection, secure extraction & verification

## Gemessene Werte

| Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe |
| --- | --- | --- | --- | --- | --- |
| Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Ausführungsort | lokal | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_transportarten: stdio |
| Pfadargument vorhanden | true | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_OUTPUT_DIR |
| Repository-Adresse geführt | true | MCP-Register | 2026-09-08T01:17:01.649Z | abgeleitet | roh_repository_url: https://github.com/Nizoka/zipnative-mcp |
| Beschreibung (Rohangabe) | ZIP MCP server: create, inspect, verify, extract securely, modify without recompression. 13 tools | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Deklarierte Version | 1.0.0 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Umgebungsvariablen (Rohangabe) | ZIPNATIVE_MCP_OUTPUT_DIR, ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_PORT, ZIPNATIVE_MCP_HTTP_TOKEN, ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES, ZIPNATIVE_MCP_MAX_ENTRIES, ZIPNATIVE_MCP_WORKERS | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Geheime Pflichtvariablen (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Transportarten (Rohangabe) | stdio | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Pfadargumente (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Repository (Rohangabe) | https://github.com/Nizoka/zipnative-mcp | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Paketquellen (Rohangabe) | npm | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Geheime Pflichtkopfzeilen (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Pfad-Umgebungsvariablen (Rohangabe) | ZIPNATIVE_MCP_CACHE_DIR, ZIPNATIVE_MCP_OUTPUT_DIR | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Remote-Adressen (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Remote-Hosts (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Statusmeldung des Registers (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Im Register eingetragen am (Rohangabe) | 2026-09-07 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Im Register geändert am (Rohangabe) | 2026-09-07 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Repository-Unterordner (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Paketbezeichner (Rohangabe) | zipnative-mcp | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Paketversionen (Rohangabe) | 1.0.0 | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Laufzeithinweise (Rohangabe) | npx | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Formate der Umgebungsvariablen (Rohangabe) | filepath, number | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Beschreibungen der Umgebungsvariablen (Rohangabe) | ZIPNATIVE_MCP_CACHE_DIR=Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue. · ZIPNATIVE_MCP_HTTP_TOKEN=Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged. · ZIPNATIVE_MCP_MAX_ENTRIES=Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start. · ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES=Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED. · ZIPNATIVE_MCP_OUTPUT_DIR=Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache). · ZIPNATIVE_MCP_PORT=Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set. · ZIPNATIVE_MCP_WORKERS=Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start. | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Symbolformate (Rohangabe) |  | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |
| Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"npm","identifier":"zipnative-mcp","version":"1.0.0","runtimeHint":"npx","transport":"stdio","environment":[{"name":"ZIPNATIVE_MCP_OUTPUT_DIR","description":"Absolute path of the one sandbox directory: zipPath / sourcePath inputs are read from it and outputMode='file' / outputDir outputs are written under it (never overwritten; the real path of every file read and of every parent written must stay inside — a planted symlink or junction is SECURITY_VIOLATION). Unset: every tool works on base64 only (no file I/O beyond the opt-in cache).","format":"filepath","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_CACHE_DIR","description":"Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches zipPath / sourcePath inputs, file output, defaultDate='now', parallel, describe_engine or draft_governance_issue.","format":"filepath","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_PORT","description":"Serve Streamable HTTP on this loopback port (POST /mcp) instead of stdio (MCP 2026-07-28, stateless, legacy fallback). Unauthenticated unless ZIPNATIVE_MCP_HTTP_TOKEN is set.","format":"number","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_HTTP_TOKEN","description":"Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged.","required":false,"secret":true},{"name":"ZIPNATIVE_MCP_MAX_UNCOMPRESSED_BYTES","description":"Operator ceiling for limits.maxEntryUncompressedSize and limits.maxTotalUncompressedSize in bytes (default 8589934592 = 8 GiB, the engine default). Integer >= 1024, read once at startup; an invalid value refuses to start. A per-call value above it is refused with LIMIT_CEILING_EXCEEDED.","format":"number","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_MAX_ENTRIES","description":"Operator ceiling for limits.maxEntries and scan_zip_forward maxEntries (default 100000, the engine default; the scanner's default budget of 10000 is clamped to it, only an explicit value above it is refused). Integer >= 1, read once at startup; an invalid value refuses to start.","format":"number","required":false,"secret":false},{"name":"ZIPNATIVE_MCP_WORKERS","description":"Operator ceiling for create_zip parallel.workers (default 8; with no explicit workers the engine default max(1, min(cores - 1, 8)) applies, bounded by this ceiling; 0 disables worker threads and keeps compression on the calling thread). Integer >= 0, read once at startup; an invalid value refuses to start.","format":"number","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Verweise

- Namensraum: [[namensraum/io-github-nizoka|io.github.Nizoka]]

---

- Registerseite: <https://tracevero.de/mcp/io-github-nizoka-zipnative-mcp>
- Abgerufen am: 2026-10-10
