Dreep MCP Server
Give any AI agent a media pipeline.
The official Model Context Protocol server for
Dreep: upload, transform, convert, OCR and deliver images,
videos and documents from Claude, Cursor, VS Code, Codex, Gemini and every other MCP client.
Dreep docs · API reference · Python SDK · Changelog · Report a bug
Ask your agent things like:
"Upload
~/Desktop/launch/hero.pngtomarketing/2026and give me a 1200px WebP and a 400px square thumbnail.""Pull the text out of this scanned invoice."
"Convert
contract.docxto PDF and give me a link that expires in an hour.""Cut the background out of
product.jpgand show it on white."
Contents
- How it works
- Quick start
- Add it to your client: Claude Desktop · Claude Code · Cursor · VS Code · Windsurf · Codex CLI · Gemini CLI · Zed · Cline and others · Remote (HTTP)
- Tools
- Configuration
- Security
- Development
How it works
flowchart LR
A["AI agent<br/>(Claude, Cursor, Codex...)"] -- "MCP<br/>stdio or HTTP" --> S["dreep-mcp"]
S -- "dreep SDK<br/>(your API key)" --> API["Dreep API"]
API --> CDN["Dreep CDN<br/>(or your custom domain)"]
S -. "URL building:<br/>no network" .-> CDN
- Your MCP client starts
dreep-mcpon your machine (stdio), or connects to one you host (streamable HTTP). - The agent sees 14 tools (16 with deletes enabled), each with a typed JSON schema that lists every valid transform value, so it calls them correctly the first time.
- Each tool calls the official Dreep SDK (Node or Python), which talks to the Dreep API with your key. Delivery and signed URLs are built locally, with no API call.
- Results come back as structured JSON. Every asset carries the delivery
urlexactly as Dreep returned it, custom CDN domain included.
There are two native servers, one for Node and one for Python, so you only need the runtime you already have. They expose the same tools: the Python server exports its tool names, descriptions and input schemas to npm/contract/tools.json, the Node server serves that file, and CI fails if it goes stale. The one known difference comes from the Node SDK.
Quick start
-
Create an API key on the API Keys page of the Dreep dashboard.
-
Add the server to your client (below). Pick whichever runtime you already have:
Runner Command Needs npx npx -y dreep-mcpNode 20+ uvx uvx dreep-mcpuv pip pip install dreep-mcp, thendreep-mcpPython 3.10+ The examples below use
npx. To use uvx instead, swap"command": "npx", "args": ["-y", "dreep-mcp"]for"command": "uvx", "args": ["dreep-mcp"].
Add it to your client
Every client needs the same three things: a command (npx), its arguments (-y dreep-mcp), and your API key in the DREEP_API_KEY environment variable. Replace drp_live_your_key with your key. Add DREEP_SIGNING_SECRET if you use signed folders, and DREEP_MCP_ALLOW_DELETE if you want the delete tools (see Configuration).
Claude Desktop
Open Settings → Developer → Edit Config, which opens claude_desktop_config.json:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"dreep": {
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": {
"DREEP_API_KEY": "drp_live_your_key",
"DREEP_SIGNING_SECRET": "your_signing_secret"
}
}
}
}
Restart Claude Desktop. Dreep appears under the tools (slider) icon in the message box.
If Claude Desktop can't find
npx, use its full path (runwhich npx). GUI apps don't always inherit your shell'sPATH, which is common with nvm.
Claude Code
claude mcp add dreep --scope user -e DREEP_API_KEY=drp_live_your_key -- npx -y dreep-mcp
--scope user makes it available in every project; leave it out to add it to the current project only, or use --scope project to share it with your team through .mcp.json (keep the key out of that file, as shown below). Check it with claude mcp list, or /mcp inside a session.
To share the setup in a repository without committing the key, put this in .mcp.json and let each person export DREEP_API_KEY in their own shell:
{
"mcpServers": {
"dreep": {
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": { "DREEP_API_KEY": "${DREEP_API_KEY}" }
}
}
}
Cursor
Open Cursor Settings → MCP → Add new MCP server, or edit ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):
{
"mcpServers": {
"dreep": {
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": { "DREEP_API_KEY": "drp_live_your_key" }
}
}
}
The Dreep tools are then available to the agent in chat.
VS Code (GitHub Copilot)
Create .vscode/mcp.json. VS Code asks for the key the first time and stores it securely:
{
"inputs": [
{
"type": "promptString",
"id": "dreep-api-key",
"description": "Dreep API key",
"password": true
}
],
"servers": {
"dreep": {
"type": "stdio",
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": { "DREEP_API_KEY": "${input:dreep-api-key}" }
}
}
}
Open Copilot Chat in Agent mode and pick the Dreep tools from the tools menu.
Windsurf
Open Windsurf Settings → Cascade → MCP Servers → View raw config, or edit ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"dreep": {
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": { "DREEP_API_KEY": "drp_live_your_key" }
}
}
}
OpenAI Codex CLI
Add to ~/.codex/config.toml:
[mcp_servers.dreep]
command = "npx"
args = ["-y", "dreep-mcp"]
env = { DREEP_API_KEY = "drp_live_your_key" }
Gemini CLI
Add to ~/.gemini/settings.json (or .gemini/settings.json in a project):
{
"mcpServers": {
"dreep": {
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": { "DREEP_API_KEY": "drp_live_your_key" }
}
}
}
Zed
Add to Zed's settings.json (Zed → Settings → Open Settings):
{
"context_servers": {
"dreep": {
"command": "npx",
"args": ["-y", "dreep-mcp"],
"env": { "DREEP_API_KEY": "drp_live_your_key" }
}
}
}
Cline and other clients
Cline (MCP Servers → Configure), Roo Code, Continue, Goose, JetBrains AI Assistant, LM Studio and most other clients take the same mcpServers block shown for Cursor. Anything that can launch a stdio MCP server can run npx -y dreep-mcp with DREEP_API_KEY set.
Remote clients over HTTP
For web-based agents, shared team servers or containers, run the streamable HTTP transport:
export DREEP_API_KEY=drp_live_your_key
export DREEP_MCP_HTTP_TOKEN="$(openssl rand -hex 32)"
npx -y dreep-mcp --transport http --host 0.0.0.0 --port 8000
The endpoint is http://<host>:8000/mcp, and every request must send Authorization: Bearer <DREEP_MCP_HTTP_TOKEN>. Put it behind HTTPS (a reverse proxy or your platform's load balancer) before exposing it. Then connect, for example from Claude Code:
claude mcp add --transport http dreep https://mcp.example.com/mcp --header "Authorization: Bearer $DREEP_MCP_HTTP_TOKEN"
Without --host it binds to 127.0.0.1, and it refuses to bind to any other address unless DREEP_MCP_HTTP_TOKEN is set. Over HTTP the tools can't read files on the server unless you allow specific directories with DREEP_MCP_FILE_ROOTS; remote callers send files as content_base64 instead.
Tools
| Tool | What it does | Kind |
|---|---|---|
upload_file |
Uploads an image, video, audio file or document from a local path or base64 content, optionally transforming it before storage. Files over 100 MB stream straight to storage. | writes |
create_upload_url |
Starts a presigned upload for bytes the server can't read (PUT them, then confirm). | writes |
confirm_upload |
Finalises a presigned upload and returns the asset. | writes |
list_media |
Lists assets with pagination, filtered by folder. | read-only |
remove_background |
Cuts the subject out of an image and stores a transparent PNG or WebP. | writes |
extract_text |
OCR for images and PDFs. On the Python server, optionally with line blocks and bounding boxes (include_blocks). |
writes |
convert_document |
Word ↔ PDF, Excel, PowerPoint, CSV, or a PDF page to PNG/JPEG. | writes |
build_delivery_url |
Resize, crop, convert, compress, blur, round or trim an asset at the CDN. | local, no network |
build_signed_url |
A time-limited link for an asset in a signed folder. | local, no network |
create_folder |
Creates a folder or a whole path, with access control (public, private, signed) on top-level folders. |
writes |
list_folders |
Lists folders with their paths and access control. | read-only |
create_preset |
Saves a named transform for reuse. | writes |
list_presets |
Lists saved presets. | read-only |
get_usage |
Storage used and image, file and folder counts. | read-only |
delete_media |
Permanently deletes an asset. Only when DREEP_MCP_ALLOW_DELETE is set. |
destructive |
delete_preset |
Deletes a preset. Only when DREEP_MCP_ALLOW_DELETE is set. |
destructive |
Every tool carries MCP annotations: read-only tools are marked so clients can run them without asking, and delete tools are marked destructive so clients ask you first.
A few behaviours come straight from the API reference, verified against the live API:
- Use URLs as returned. Projects can serve assets from a custom CDN domain, so the tools never construct a delivery URL from scratch; they transform the one Dreep returned.
- Signed URLs sign the asset and expiry only (
HMAC-SHA256over"{id}:{exp}"). Transform parameters ride along unsigned. - Access control is set on top-level folders; nested folders inherit it. The API has no endpoint for deleting folders.
- Presets need a
format, and preset keys may only contain lowercase letters, digits and underscores.
Configuration
| Variable | Required | Purpose |
|---|---|---|
DREEP_API_KEY |
yes | Your project API key. |
DREEP_SIGNING_SECRET |
for signed URLs | The URL Signing Secret from the dashboard's API Keys page. |
DREEP_MCP_ALLOW_DELETE |
no | 1 registers delete_media and delete_preset. Off by default. |
DREEP_MCP_FILE_ROOTS |
no | Directories the file tools may read, separated by : (; on Windows). Unset over stdio means any file you can read; unset over HTTP means none. |
DREEP_MCP_HTTP_TOKEN |
for public HTTP | Bearer token every HTTP request must present. |
Command-line options:
dreep-mcp [--transport {stdio,http}] [--host HOST] [--port PORT] [--path PATH]
| Option | Default |
|---|---|
--transport |
stdio |
--host |
127.0.0.1 |
--port |
8000 |
--path |
/mcp |
Security
- Your API key can read, upload and delete everything in the project. It stays in the server's environment and is sent only to the Dreep API, never to the agent.
- Deletes are off unless you turn them on, and are marked destructive so clients confirm them.
- File access is scoped. Restrict which directories the agent can upload from with
DREEP_MCP_FILE_ROOTS. Over HTTP, local file reads are off unless you set it. - The HTTP transport binds to localhost by default and refuses a public address without
DREEP_MCP_HTTP_TOKEN. Tokens are compared in constant time. - Signed URLs are bearer tokens. Anyone with the link can fetch the asset until it expires.
Report vulnerabilities privately; see SECURITY.md.
Development
git clone https://github.com/IndigoSoftwares21/dreep-mcp.git
cd dreep-mcp
bash scripts/setup_hooks.sh # venv, dev dependencies, git hooks
bash scripts/quality_gate.sh # lint, format, repository rules, mypy --strict, Python and Node tests
Try your local checkout in a client by pointing it at the venv: "command": "/path/to/dreep-mcp/.venv/bin/dreep-mcp". To poke at the tools interactively, run the MCP Inspector:
npx @modelcontextprotocol/inspector .venv/bin/dreep-mcp
The layout:
| Path | What lives there |
|---|---|
src/dreep_mcp/_tools_*.py |
The Python server: one module per tool group |
src/dreep_mcp/_params.py, _transform_input.py |
The schemas the agent reads, for both servers |
src/dreep_mcp/_cli.py |
The Python command and both transports |
npm/src/tools*.ts |
The Node server: the same tool groups |
npm/contract/tools.json |
Generated tool contract the Node server serves (scripts/export_contract.py) |
scripts/rules/ |
Repository rules: file length, no magic strings, DRY, layering, security |
Read CONTRIBUTING.md before opening a pull request, and AGENTS.md if you're an AI agent working in this repository.
License
Metadata
Release files for dreep-mcp 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| dreep_mcp-0.2.0.tar.gz | 33.3 kB | With provenance | Details for dreep_mcp-0.2.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| dreep_mcp-0.2.0-py3-none-any.whl | Python 3 | none | any | Details for dreep_mcp-0.2.0-py3-none-any.whl |
Total release size: 61.3 kB
Release files / dreep_mcp-0.2.0.tar.gz
| Download URL | dreep_mcp-0.2.0.tar.gz |
|---|---|
| Size | 33.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5f67ca84d0ec58e659a55e4088548a684b685a427d984cd551ea82b8dfbc7054
|
|
BLAKE2b-256 checksum How to use checksums |
ae556fed5f88ca9b4153e2c7acad68f06acd3c2823933d8a903e4f0dd5271fff
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.
Transparency logRelease files / dreep_mcp-0.2.0-py3-none-any.whl
| Download URL | dreep_mcp-0.2.0-py3-none-any.whl |
|---|---|
| Size | 28.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
6e3a210d06c3c4b2cd111ead0ef637677e5002862d9a04cb374c62dd4b276d4c
|
|
BLAKE2b-256 checksum How to use checksums |
e080c3234aeafb1105abc7ec4667861b5c82d60493fb925e3607f6bc6b77f51b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.
Transparency logSecurity for dreep-mcp 0.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for dreep_mcp-0.2.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.