Skip to main content
Glama

ZIP create / extract / list

ai_zip

Create, extract, or list ZIP archives locally, with zip-slip protection and configurable size/file limits for safe archive handling.

Instructions

Work with ZIP archives locally. action "create": zip files and folders (given as paths; folders keep their own name as the top folder, symlinks are skipped) into one .zip. action "extract": unpack a .zip (path or base64) into the "output" folder; entries with "..", absolute paths or drive letters are refused (zip-slip protection), existing files are kept unless overwrite is true. action "list": entry names with sizes, no extraction. Limits: total uncompressed size 500 MB and 10000 files by default (maxTotalMB / maxFiles). Encrypted ZIPs are not supported.

Input Schema

NameRequiredDescriptionDefault
zipNoextract / list: the ZIP archive, a local path or base64.
filesNocreate: files and folders to add (local paths).
levelNocreate: compression level 0 (store) to 9 (smallest). Default 6.
actionYes
outputNocreate: the .zip path (or a folder ending in "/"). extract: the folder to extract into. Default: the server output folder.
maxFilesNoCap on the number of entries. Default 10000.
overwriteNoextract: replace files that already exist in the output folder. Default false (they are skipped).
maxTotalMBNoCap on the total uncompressed size, MB. Default 500.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations only flagging readOnly=false, openWorld=false, idempotent=false, the description supplies the meaningful behavior: symlinks skipped, folder names preserved as top-level folder, zip-slip refusals for '..'/absolute paths/drive letters, existing files kept unless overwrite=true, and no support for encrypted ZIPs. It also states hard limits (500 MB, 10000 entries) that the annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action taxonomy, then limits, then unsupported cases – a sensible order with no filler sentences. Density is high because of parenthetical clauses, but every clause (symlink skipping, zip-slip refusal, default caps) conveys non-obvious behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter, multi-mode tool with no output schema, the description still covers each mode's inputs, default destinations, safety behavior, hard caps and an unsupported case. The 'list' mode's return shape ('entry names with sizes') is described, so nothing essential an agent needs before calling is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 88%, so the baseline is 3; the description earns above that by adding meaning the schema does not, notably that create paths are local paths whose folders keep their own name, that multi-part sizes are capped by maxTotalMB/maxFiles, and that extract's output defaults to the server output folder. It does not restate the level or overwrite semantics beyond what the schema already documents.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb+resource ('Work with ZIP archives locally') and then enumerates the three actions with concrete effects (zip, unpack, entry names with sizes). No sibling tool in the list touches archives, and the action breakdown makes the scope unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Each action carries an in-line statement of what it does and its constraints, which implicitly routes the agent between create/extract/list ('list: entry names with sizes, no extraction'). It does not name exclusions or prerequisites (e.g. when a caller should prefer a non-local upload path, or required filesystem access), so it falls short of explicitly stating when-not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools