url-download-mcp
This MCP server enables AI assistants to securely download files from HTTP/HTTPS URLs to the local filesystem with comprehensive validation and control features.
Core Capabilities:
Single & batch downloads - Download individual files or up to 100 files concurrently
Configurable limits - File size validation (1-5000 MB, default 500MB) and timeout settings (1-300 seconds, default 60 seconds)
Smart file handling - Automatic unique filename generation to prevent overwrites, custom output directories (default ~/Downloads/mcp-downloads/)
Detailed results - Returns file paths, sizes, content types, and success/failure status for each download
Security features - URL validation and size restrictions for safe operations
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@url-download-mcpdownload the PDF from https://example.com/report.pdf to my desktop"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP URL Downloader
A Model Context Protocol (MCP) server that enables AI assistants to download files from URLs to the local filesystem.
Features
Download single or multiple files from URLs with concurrent support
File size validation (configurable, default 500MB)
Unique filename generation to prevent overwrites
Security
Related MCP server: Website Downloader
Installation
# Using uvx (recommended)
uvx mcp-url-downloader
# Using pip
pip install mcp-url-downloader
# From source
git clone https://github.com/dmitryglhf/mcp-url-downloader.git
cd mcp-url-downloader
uv syncConfiguration
Claude Desktop
To integrate server with Claude, add the following to your claude_desktop_config.json file:
{
"mcpServers": {
"url-downloader": {
"command": "uvx",
"args": ["mcp-url-downloader"]
}
}
}Tools
download_single_file
Download a single file from a URL with optional custom filename.
Parameters:
url(string, required): URL of the file to downloadMust be a valid HTTP/HTTPS URL
Maximum length: 2048 characters
output_dir(string, optional): Directory to save the fileDefault:
~/Downloads/mcp-downloads/Must be a valid writable directory path
filename(string, optional): Custom filename for the saved fileIf not provided, extracted from URL
Will be sanitized automatically
Extension will be preserved or detected
timeout(number, optional): Download timeout in secondsDefault:
60Range:
1-300
max_size_mb(number, optional): Maximum file size in MBDefault:
500Range:
1-5000
download_files
Download multiple files from URLs concurrently.
Parameters:
urls(array of strings, required): List of URLs to downloadEach URL must be valid HTTP/HTTPS
Maximum: 100 URLs per request
Each URL max length: 2048 characters
output_dir(string, optional): Directory to save all filesDefault:
~/Downloads/mcp-downloads/All files will be saved to this directory
timeout(number, optional): Download timeout in seconds per fileDefault:
60Range:
1-300
max_size_mb(number, optional): Maximum file size in MB per fileDefault:
500Range:
1-5000
Rate Limits
Maximum 100 URLs per
download_filesrequestMaximum concurrent downloads: 10 (configurable up to 50)
URL length limited to 2048 characters
Timeout range: 1-300 seconds
File size range: 1-5000 MB
Development
# Run tests
uv run pytestAvailable Tools
2 toolsdownload_filesB
Download multiple files from URLs and save to local filesystem.
| Name | Required | Description | Default |
|---|---|---|---|
| urls | Yes | List of URLs to download | |
| output_dir | No | Directory to save downloaded files | |
| timeout | No | Download timeout in seconds | |
| max_size_mb | No | Maximum file size in MB (default: 500) |
Output Schema
| Name | Required | Description |
|---|---|---|
| results | Yes | List of download results |
| failed_count | Yes | Number of failed downloads |
| success_count | Yes | Number of successful downloads |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions saving to the local filesystem, which implies a write operation, but lacks details on permissions, error handling, rate limits, or what happens if files already exist. For a tool with no annotations and potential side effects, this is inadequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's purpose without unnecessary words. It's front-loaded with the core action and resource, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has an output schema (which handles return values) and full schema coverage for parameters, the description's minimalism is partially acceptable. However, for a tool that performs downloads and file system writes with no annotations, more context on behavior and usage would improve completeness, leaving it at an adequate but basic level.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all parameters. The description adds no additional meaning beyond what's in the schema, such as explaining parameter interactions or providing examples. Baseline 3 is appropriate when the schema handles all parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('download multiple files') and resource ('from URLs'), and distinguishes from the sibling tool 'download_single_file' by specifying 'multiple files'. However, it doesn't explicitly mention the sibling tool name or contrast their purposes directly, keeping it at a 4 rather than a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'download_single_file', nor does it mention any prerequisites, constraints, or typical use cases. It states what the tool does but not when it's appropriate, resulting in minimal usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
download_single_fileC
Download a single file from URL with optional custom filename.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL of the file to download | |
| output_dir | No | Directory to save the file | |
| filename | No | Custom filename (optional) | |
| timeout | No | Download timeout in seconds | |
| max_size_mb | No | Maximum file size in MB (default: 500) |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | Error message if download failed |
| success | Yes | Whether the download was successful |
| file_name | Yes | Name of the downloaded file |
| file_path | Yes | Full path where the file was saved |
| file_size | Yes | Size of the downloaded file in bytes |
| content_type | No | MIME type of the downloaded file |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden but only mentions optional filename customization. It fails to disclose critical behavioral traits like network dependencies, file system interactions, timeout behavior, size limits, error handling, or output location details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero wasted words. It's appropriately sized and front-loaded with the core functionality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema, this is a network/filesystem operation with 5 parameters and no annotations. The description is inadequate for such complexity - it doesn't address security considerations, failure modes, or what happens with the downloaded file.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so parameters are well-documented in the schema. The description adds minimal value by mentioning 'optional custom filename' which corresponds to the 'filename' parameter, but doesn't provide additional context beyond what the schema already specifies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Download') and resource ('a single file from URL'), distinguishing it from the sibling tool 'download_files' which suggests batch operations. However, it doesn't explicitly contrast with the sibling beyond the 'single' qualifier.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus 'download_files' or other alternatives. It mentions 'optional custom filename' but gives no context about prerequisites, error conditions, or typical use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
2 tool updates
v1.0.0- Changed
download_files1 field changed- added
Input schema / titleAdded value: +"download_filesArguments"
- Changed
download_single_file1 field changed- added
Input schema / titleAdded value: +"download_single_fileArguments"
2 tool updates
- First observed
download_files - First observed
download_single_file
TDQS
The two tools have overlapping purposes—both download files from URLs—but their descriptions help differentiate them: one handles multiple files, the other a single file with optional custom naming. However, the core functionality is similar, which could lead to confusion about when to use each.
The tool names follow a consistent verb_noun pattern with snake_case throughout: 'download_files' and 'download_single_file'. Both start with 'download' and clearly describe their scope, making the naming predictable and easy to understand.
With only 2 tools, the server feels thin for a URL download domain, as it lacks operations like checking download status, handling errors, or managing downloads. While the tools cover basic downloading, the count is borderline for providing a complete surface.
The tool set is significantly incomplete for a URL download server. It lacks essential operations such as validating URLs, pausing/resuming downloads, handling authentication, or providing progress updates. This will likely cause agent failures in more complex scenarios.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
Persistent file storage for AI agents via MCP and curl. Upload, download, and version files.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
The Mercado Pago MCP Server implements the Model Context Protocol to provide AI agents and LLMs with access to Mercado Pago's APIs and tools within compatible development environments. It acts as an intermediary that translates Mercado Pago resources into executable functions (tools) that AI applications can invoke to perform actions and automate flows. The server simplifies integration, enables using documentation to implement or improve code, and optimizes operations through natural language interactions without manual implementations.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables AI assistants to download images from URLs and perform basic image optimization tasks.22017Apache 2.0
- FlicenseBqualityDmaintenanceProvides a tool to download entire websites using wget. It preserves the website structure and converts links to work locally.1156-
- AlicenseBqualityDmaintenanceThis server enables users to download entire websites and their assets for offline access, supporting configurable depth and concurrency settings.16MIT
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol (MCP) server that allows AI models to safely access and interact with local file systems, enabling reading file contents, listing directories, and retrieving file metadata.1910MIT
Appeared in Searches
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dmitryglhf/url-download-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server