internet-archive-mcpunofficial

safety

Safe by design

It reads unless you ask for more, shows every change before making it, keeps your keys out of the conversation and treats what it reads as material, not instructions.

the server

What the server will and won't do

  • Read-only by defaultStarted plainly, it lists only the 39 tools that read. Uploading and editing need --mode write (11 more tools); deleting needs --allow-delete too (2 more).
  • Preview, then confirmEvery write tool that changes something answers first with a preview of exactly what it would change and an id. Nothing changes until the same call comes back with that id.
  • Keys never in the chatNo tool takes archive.org keys as an argument, and the server never returns or logs them. You set them up yourself, in your own terminal or your client's settings.
  • Third-party text is labelledTitles, OCR text, captions, reviews and archived web pages come back marked as untrusted content, so the assistant reads them as material, never as instructions.
  • A polite guestEvery request names the project in its User-Agent and waits its turn: one shared limit of 3 requests a second by default, and answers kept small.
write mode

When you do let it write

account_info says which mode the server is in

Write tools are only listed when the server starts with --mode write, and work in two calls: the first returns a preview and a confirmation_id; the same call again with that id makes the change. Uploads only read from the one folder named by --upload-root. Over HTTP, a reader's token gets only the read tools.

Whatever it does in write mode is public and done as you, with your archive.org account, so start small, with test_collection.

this website

This website

  • Nothing from elsewherePages, fonts, scripts and images are all served from this site. There are no analytics, trackers or cookies.
  • A strict content policyEvery page carries a content security policy: scripts and styles only from this site, none inline, no connections out, no forms. The one outside request is the 1898 recording, streamed from archive.org when you press play.
  • Replays, not live callsThe stories and the Ask the Archive demos replay tool calls captured earlier with the real server. Nothing on the site calls an assistant or archive.org as you read.
  • No personal dataThe captured results are stripped of uploader and staff fields and account-named lists before they are saved.