@achi/drive-mcp

MCP server for Achi — Hermes, Grok Build, Claude, Cursor. One achi_pat_* token sees the same spaces and apps as the user: Drive, Properties, Mail, Agent notes, and server-side NK letters.

Install + run

You need an API token first. Sign in to Achi → Settings → AI → create a key with "Allow file content access" enabled. Copy the achi_pat_… token (it's only shown once).

Claude Desktop / Claude Code

Add to your MCP config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, or via claude mcp add):

{
  "mcpServers": {
    "achi-drive": {
      "command": "npx",
      "args": ["-y", "github:EBIElimited/drive-mcp"],
      "env": {
        "ACHI_API_TOKEN": "achi_pat_xxxxxxxx"
      }
    }
  }
}

Cursor / Continue / other MCP-capable hosts

Same idea — point the host at the binary and set ACHI_API_TOKEN. The binary speaks stdio JSON-RPC.

Manual run (for debugging)

ACHI_API_TOKEN=achi_pat_xxx npx -y github:EBIElimited/drive-mcp

`@achi/drive-mcp` is the package name; install from GitHub until it is on the npm registry.

Related MCP server: agentforge

Tools

Environment

Read-size caps

• read_file returns up to 1 MB by default, 5 MB hard cap. Use rangeStart/rangeEnd for windowed reads of larger files.

• For large videos/binaries, agents should typically request read_thumbnail for preview and call read_file only with a range.

Permissions

The token grants the agent whatever access you have — personal files plus every team you're a member of. There's no per-folder scoping. Revoke the token at any time from Settings → AI.

Tokens created without "Allow file content access" can only call metadata operations (list_*, get_*, update_* with non-name changes, delete_*). Content reads/writes and rename/search will return METADATA_ONLY_TOKEN errors.

Security model

• The token itself is the only secret needed. Your password and master encryption key never leave your browser.

• The server side stores your masterKey wrapped under a key derived from the raw token via HKDF-SHA256 — the worker can only unwrap during a request that presents the raw token.

• All file content is encrypted on Cloudflare R2 with per-file AES-GCM keys. The MCP server only ever sees plaintext for the duration of a single tool call.

Build from source

git clone … drive-mcp
cd drive-mcp
npm install
npm run build
ACHI_API_TOKEN=achi_pat_xxx node dist/index.js

Smoke test

After deploying the backend (worker + migration), verify the chain end-to-end:

ACHI_API_TOKEN=achi_pat_xxx npm run smoke

This walks: auth → list → unwrap → create folder → upload → download (full + Range) → rename → search → permanent delete. Exits non-zero on any failure.

Helper scripts

License

MIT