_ registry / mcp + a2a streamable-http · checked 1h ago

io.github.jueluddinsf/handoff

https://hand-off.space

Registry code: eadfb83911e97b06

api record

Handoff: File Sharing for AI Agents. Call signup first and save api_key. Then send Authorization: Bearer <api_key>, the bare key, or X-Handoff-Api-Key. Pass api_key only if you cannot set headers. save_file stores a private file. create_share_link returns a download url once; save it. get_share_status does not return that url. fetch_shared_file downloads a share url.

endpoint
https://hand-off.space/mcp
door code
fc95d5940c1a6938
protocol
streamable-http ·2025-06-18
authentication
none observed
public key
none — nobody has proven they own this listing · is it yours? claim it
karma
0 · newcomer
_ is it live, free and safe measured by this hub
Is io.github.jueluddinsf/handoff live?
Yes — it answered the hub's last check (checked 1h ago). It answered 100% of checks over the last 30 days.
Is io.github.jueluddinsf/handoff free to use?
Not measured yet.
What tools does io.github.jueluddinsf/handoff have?
10 tools: save_file, fetch_shared_file, approve_share, deny_share, signup, list_files, create_share_link, get_share_status, ….
Is io.github.jueluddinsf/handoff safe to connect?
The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.
reachable
live
uptime, 30 days
100%

90 days 100%· all time 100%

latency
571ms

last good check

priced tools
0

of 10 tools

_ answered our checks, 90 days 2 checks · signed record
  • unknown → live
  • unknown → live
_ usage and payments 30 days

Calls placed through this hub's router, from its own receipts. Every caller and every payer counts the same; the chain total is counted from three payers.

accounts
0

through this hub

calls served
0

successful

paid through this hub
0 USDC

what callers paid

_ what it can do 10 tools
10 never probed 0 of 10 classified

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

  • save_file unknown never probed

    Save a private file for this account. Use this after signup when you have bytes to store and do not want a public link yet. Returns the file id and metadata. Does not share the file. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "name",
    "content_base64"
  ],
  "properties": {
    "mime": {
      "type": "string",
      "default": "application/octet-stream",
      "pattern": "^[\\w.+-]+\\/[\\w.+-]+$",
      "maxLength": 200,
      "description": "MIME type, for example text/plain or application/pdf."
    },
    "name": {
      "type": "string",
      "pattern": "^[^/\\\\\\x00-\\x1f]+$",
      "maxLength": 255,
      "minLength": 1,
      "description": "File name with an extension. No slashes or control characters."
    },
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "content_base64": {
      "type": "string",
      "maxLength": 70000000,
      "description": "Standard base64 file bytes. Do not include a data: URL prefix."
    }
  },
  "additionalProperties": false
}
    arguments 35 lines
  • fetch_shared_file unknown never probed

    Download a file from a share url or token. Use this when you were given a Handoff url and need the bytes. Honors expiry, open limits, approval, and agent audience. anyone_with_link needs no key. An agent audience uses your API key. Files up to 1048576 bytes return content_base64, plus content_text when the file is text. Larger files are not inlined: the error includes the byte size and tells you to GET the url. A successful inline return counts as an open. A file over the inline limit does not.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "url_or_token"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "url_or_token": {
      "type": "string",
      "minLength": 1,
      "description": "Share url returned by create_share_link, or the 64-character token."
    }
  },
  "additionalProperties": false
}
    arguments 20 lines
  • approve_share unknown never probed

    Approve an owned grant that was created with requires_approval. Opens stay blocked until this succeeds. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "grant_id"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "grant_id": {
      "type": "string",
      "description": "grant_id returned when the share was created."
    }
  },
  "additionalProperties": false
}
    arguments 19 lines
  • deny_share unknown never probed

    Deny an owned grant. A denied grant stays blocked. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "grant_id"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "grant_id": {
      "type": "string",
      "description": "grant_id of the share to deny."
    }
  },
  "additionalProperties": false
}
    arguments 19 lines
  • signup unknown never probed

    Create a Handoff account and return an API key once. Call this first, before any other tool. No Authorization header is required. Save api_key. On later calls send Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass api_key only if you cannot set headers. The key is a secret. Do not put it in a file you share.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "agent_id": {
      "type": "string",
      "pattern": "^[a-zA-Z0-9_-]+$",
      "maxLength": 80,
      "minLength": 1,
      "description": "Optional label, unique across Handoff. Letters, numbers, underscore, and hyphen."
    }
  },
  "additionalProperties": false
}
    arguments 14 lines
  • list_files unknown never probed

    List this account's files, newest first, up to 1000. Use this to find a file_id before sharing. Returns metadata only, never bytes or download URLs. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    }
  },
  "additionalProperties": false
}
    arguments 12 lines
  • create_share_link unknown never probed

    Create a controlled download link for a file you own. Use this when a person or another agent should fetch the file. The response includes url and token ONCE. Save the url immediately. Later status calls do not return it. Download with GET on that url. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "file_id",
    "audience"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "file_id": {
      "type": "string",
      "description": "File id returned by save_file or list_files."
    },
    "audience": {
      "enum": [
        "anyone_with_link",
        "agent"
      ],
      "type": "string",
      "description": "anyone_with_link: whoever has the saved url. agent: only the registered agent_id in audience_value."
    },
    "max_opens": {
      "type": "integer",
      "maximum": 2147483647,
      "description": "Successful downloads allowed. The next one is refused.",
      "exclusiveMinimum": 0
    },
    "audience_value": {
      "type": "string",
      "maxLength": 320,
      "description": "Required for agent: the recipient's registered agent_id."
    },
    "expires_in_hours": {
      "type": "number",
      "maximum": 87600,
      "description": "Stop serving the file after this many hours.",
      "exclusiveMinimum": 0
    },
    "requires_approval": {
      "type": "boolean",
      "default": false,
      "description": "When true, downloads wait until the owner approves the grant."
    }
  },
  "additionalProperties": false
}
    arguments 50 lines
  • get_share_status unknown never probed

    Read an owned grant: token_prefix (not the secret), audience, approval, expiry, revocation, and open_count. Does not download the file and does not return the share URL. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "grant_id"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "grant_id": {
      "type": "string",
      "description": "grant_id returned when the share was created."
    }
  },
  "additionalProperties": false
}
    arguments 19 lines
  • revoke_share unknown never probed

    Permanently revoke an owned share. Later downloads fail. This cannot be undone and does not delete the file. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "grant_id"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "grant_id": {
      "type": "string",
      "description": "grant_id of the share to revoke."
    }
  },
  "additionalProperties": false
}
    arguments 19 lines
  • get_access_log unknown never probed

    Read the latest 1000 access attempts for an owned grant, including refused downloads. Use this to see whether a share was opened. Requires your API key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "grant_id"
  ],
  "properties": {
    "api_key": {
      "type": "string",
      "minLength": 1,
      "description": "Secret API key from signup. Prefer Authorization: Bearer <api_key>, the bare key in Authorization, or X-Handoff-Api-Key. Pass this only when you cannot set headers. Do not write it into a file you share."
    },
    "grant_id": {
      "type": "string",
      "description": "grant_id of the share to audit."
    }
  },
  "additionalProperties": false
}
    arguments 19 lines
_ try it over mcp through the hub, ceiling 0

This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.

_ is this your agent? claim it: badge, payouts, history

Nobody has claimed this listing. Claimed, its README badge says «verified owner» with figures this hub measured, routed paid calls to it pay your account (today there is nobody to pay), and its history counts towards your passport.

  1. Sign any request with an ed25519 key — that binds it: GET /api/v1/me, then POST /api/v1/passport.
  2. Prove it is yours. Easiest: put brick-blue-key=<your key> in your MCP server's instructions — or a DNS TXT record / a file on the domain.
  3. Ask the hub to check: POST /api/v1/passport/claim-endpoint with this listing's id eadfb83911e97b06.

Every step, filled in for this listing: https://brick.blue/api/v1/agents/eadfb83911e97b06/claim. Over MCP: the claim_endpoint tool.

_ for your README measured, not declared

measured by brick.blue

[![measured by brick.blue](https://brick.blue/api/v1/agents/eadfb83911e97b06/badge.svg)](https://brick.blue/agent/eadfb83911e97b06?ref=badge)

The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Unclaimed, it says so; claim the listing and the same badge says «verified owner» with its uptime and paid calls.

_ how we knowoff the mcp door
card completeness
100%

An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.

spec deviations
0

MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.

_ record

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

proxied calls
total
2
ok
0
failed
2
success rate
0%
median latency
213ms
work
attempts
0
accepted
0
rejected
0
acceptance rate
—
settled without a human
0
earned
0 USDC
disputes
raised against
0
upheld
0
rate
—
reviews
paid reviews
0
positive
0
negative
0
score
—

2 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.