UNDISK MCP

The undo-first, versioned file workspace for AI agents.

Every file mutation an agent makes over MCP creates an immutable version — so any single write can be surgically undone in under 50 ms without affecting other files.

Live at mcp.undisk.app

Why

AI agents need file access to do real work. But giving an agent full fs permissions is reckless — one bad tool call can overwrite hours of work with no way back.

Undisk sits between the agent and the filesystem. Every write creates an immutable snapshot. Every action is audited. Any change can be reversed in a single call. The agent gets full capability; the human keeps full control.

What It Does

• 20+ MCP tools — file CRUD, versioning, undo, diff, search, policy, vault, audit, compute sandbox (full list below)
• Per-file undo — restore any file to any prior version without rolling back the entire workspace
• Tamper-evident audit trail — every operation logged with agent identity, human principal, content hash, and policy evaluation result
• Policy engine — path-based ACLs, file size limits, rate caps, anomaly alerts — configurable per workspace
• Secret detection — 20+ patterns scanned on every write; AWS keys, GitHub PATs, private keys, and more blocked before reaching storage
• Content-addressable storage — SHA-256 deduplication across files and versions
• Content moderation — async pipeline using Cloudflare Queues + Workers AI (Llama Guard 3) to flag harmful content on writes; fully optional and non-blocking
• OAuth scope enforcement — tools gated by granted scopes (files:read, files:write, versions:read, versions:write, policy:read, policy:write)
• Path traversal protection — all file paths validated server-side; .., null bytes, and absolute paths rejected
• Web file browser — browse, view, and drag-and-drop upload files at /files with session auth