Skip to content

SafeDrop v1.3.0 — the MCP fabric release

Choose a tag to compare

View all tags
@gclinian gclinian released this 20 May 06:04
· 17 commits to main since this release
v1.3.0
c0b1027

The "MCP fabric" release. SafeDrop is no longer just a LAN
file/clipboard tool — it's a scoped, auditable, cross-device Model
Context Protocol fabric that any AI agent (Claude Code, Cursor, Goose,
Cline, Hermes via Ollama, cloud agents over HTTPS, …) can plug into.

Downloads

File What it is How to install
SafeDrop-ios-1.3.0-unsigned.ipa iOS 17+ app, arm64, unsigned (208 KB) Re-sign with your own Apple ID via AltStore or Sideloadly; SafeDrop uses no entitlements that break re-signing. Full guide: ios/DISTRIBUTION.md
SafeDrop-android-1.3.0-debug.apk Android 8.0+ (API 26+) debug APK (19 MB) adb install -r SafeDrop-android-1.3.0-debug.apk or sideload via file manager
safedrop-1.3.0-py3-none-any.whl / .tar.gz Python desktop / CLI / MCP server pip install safedrop-1.3.0-py3-none-any.whl[mcp] then safedrop-mcp or python -m safedrop

Highlights

  • iOS Phase 1 client — native Swift/SwiftUI, same X25519 + Fernet
    protocol as Python and Android, byte-for-byte interoperable
    (system_info, read_clipboard, write_clipboard).
  • MCP HTTP / Streamable transport with bearer-token auth + per-token
    scope enforcement (safedrop-mcp --http).
  • Capability tokens (safedrop-mcp-tokens mint --scope ... --ttl ...)
    persisted to ~/.safedrop/tokens.json, instantly revocable.
  • Per-agent policy via --allow / --deny / --profile. Run
    multiple safedrop-mcp instances side-by-side, each with its own
    scope.
  • MCP bridge — import any other MCP server (mcp-server-filesystem,
    mcp-server-github, …) into the SafeDrop fabric; their tools become
    callable from every paired peer on the LAN.
  • register_local_tool — agents add new tools at runtime via
    HTTP callback URLs.
  • Trust + audit UIs on Python, Android, and iOS — review and
    revoke saved (peer, tool) decisions.

See CHANGELOG.md
for the full per-version log and MCP_AGENT_GUIDE.md
for the agent-integration deep dive.

Tests

Ran 38 tests in 14.0s — OK

Covers protocol e2e, cross-language interop (Python ↔ Kotlin ↔ Swift
all derive the same pair code from the same shared secret), policy,
tokens, HTTP transport, bridge, dynamic tool registration.

Platforms

Platform Status
macOS / Linux / Windows desktop ✅ files, clipboard, MCP server, CLI, trust + audit UI
Android (8.0+) ✅ files, clipboard, tools (take_photo etc.), trust + audit UI
iOS (17+) ✅ Phase 1 — tools, trust + audit UI. File picker on the roadmap.

License: MIT.

Assets 6
Loading