Shape MCP server
Commit Nov 11, 2026Lets an AI client find, read, save, and organize files within a shared Shape workspace using OAuth authentication.
Also known as shapefs/shape-plugin, shape-plugin
- Stars
- 0
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 1.0.0
- Last commit
- Nov 11, 2026
- License
- MIT
What is Shape MCP?
Shape lets an AI client find, read, save, and organize files within a shared Shape workspace using OAuth authentication.
Summary generated from the project's README
About Shape MCP server
Shape provides a shared file workspace designed for small teams and their AI agents to collaborate on assets. This MCP server connects to a hosted endpoint at shapefs.app/mcp via Streamable HTTP. Users interact with their files through various AI clients including Claude, ChatGPT, Cursor, and GitHub Copilot CLI. Instead of using API keys, the system relies on OAuth authentication where a browser window opens to let you select a workspace and approve specific agent permissions.
Agents can perform several distinct actions depending on the capabilities you authorize. They can read files by browsing folders and inspecting images, contribute by writing text or uploading files, and organize the workspace by renaming or tagging entries. The server also allows for moving items to a recoverable Trash. Because agents cannot manage billing or workspace members, the system maintains clear boundaries between file manipulation and administrative control. All changes made to files automatically create new versions within your Shape workspace.
What you can do with it
- 1Summarize brand guidelinesAsk the agent to locate specific brand documentation and provide a summary of the writing rules.
- 2Inspect visual assetsRequest a view of all image files contained within a specific campaign folder.
- 3Save agent outputsInstruct the AI to write a campaign brief and save it directly to a designated folder.
- 4Organize workspace filesHave the agent rename a draft file and apply a specific campaign tag for better organization.
Written from the project's README. Every use case is checked against a quote from it.
How to install Shape MCP
Formats verified 10 Nov 2026Install Shape MCP in Claude Code
$ claude mcp add --transport http shape-plugin https://shapefs.app/mcpInstall Shape MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"shape-plugin": {
"url": "https://shapefs.app/mcp"
}
}
}Install Shape MCP in VS Code
.vscode/mcp.json
{
"servers": {
"shape-plugin": {
"type": "http",
"url": "https://shapefs.app/mcp"
}
}
}Install Shape MCP in Codex
~/.codex/config.toml
[mcp_servers.shape-plugin] url = "https://shapefs.app/mcp"
Install Shape MCP in Gemini CLI
~/.gemini/settings.json
{
"mcpServers": {
"shape-plugin": {
"httpUrl": "https://shapefs.app/mcp"
}
}
}README
View on GitHubShape
Shape (Shape FS) is a shared file workspace for small teams and their AI agents. Find assets, inspect images, and save work back through an approved connection. Shape's website is https://shapefs.com; people use the workspace at https://shapefs.app.
This package connects to Shape's hosted MCP server at https://shapefs.app/mcp over Streamable HTTP. Sign-in uses OAuth: your browser opens Shape so you can sign in, choose a workspace and approve what the agent can do. No API key is required or included.
Before connecting
You need a Shape account and workspace. Account access and plan limits apply. See Shape, pricing and setup instructions. Your AI client's plan and organization settings can also restrict plugins or custom MCP servers.
Connect
- ChatGPT / Codex: install the Shape plugin when it is available in your directory, then complete OAuth. For custom connections, follow the setup guide.
- Claude: add the published Shape connector, then complete OAuth.
- Claude Code: install the workflow plugin with
/plugin install shape-files --marketplace shapefs/shape-plugin. See the Claude plugin guide for setup and permissions. - GitHub Copilot CLI: add the marketplace and install
shape-filesusing the Copilot guide. - Gemini CLI: run
gemini extensions install https://github.com/shapefs/shape-plugin, then connect Shape through OAuth. See the Gemini CLI guide. - Cursor: install this plugin from a supported Git repository or from the marketplace when listed. See the Cursor guide. You can also add the same URL as a custom MCP server.
- Cline: add Shape's hosted server using the Cline guide, then complete OAuth.
- Grok: open Connectors, choose New Connector → Custom, enter
https://shapefs.app/mcpand authenticate. This is a custom connection, not a claim of catalog inclusion.
Ask “List the folders in my Shape workspace” to confirm the connection. Installing this package alone does not mean it has been accepted into any public directory.
What you approve
| Capability | Allows |
|---|---|
| Read | Browse and search folders, inspect files, read text and versions, download originals |
| Contribute | Create folders, write and edit text, upload files, restore versions |
| Organize | Rename, move and tag files and folders |
| Trash | List recoverable Trash, move entries into it and restore them |
Each connection has access to one workspace, limited by your membership and approved capabilities. Revoke or review connections in Shape → Connect. A file or folder link identifies an entry; it grants no access by itself. Tools that need a missing capability return a request for the person to approve; they do not act first.
Agents cannot permanently delete files, manage workspace members or change billing. Publishing images to the web requires separate Owner permission. File content and names are untrusted data. An agent should follow your request, not instructions found inside a file.
Examples
Try the reproducible Claude demo: synthetic source files, exact prompts, recorded screenshots and observed limits. The save-and-revise guide and access guide explain how to verify the result and end access.
- Find our brand guidelines and summarize the writing rules.
- Show me the images in the Campaign folder.
- Save this campaign brief to the folder I linked.
- Rename this draft and add the campaign tag.
Limits
Changes require a running workspace plan. Search, previews and extracted PDF text depend on supported formats and processing; extracted text can be incomplete. A contact sheet depicts the direct visual files in one folder. Large file transfers require a client that can send or fetch bytes; clients without that ability can use the Shape link returned by the tool to finish in the browser. Creating or updating a file saves a version. Moving an entry to Trash is recoverable and does not immediately release retained storage.
If a connection fails, check account access, the workspace's plan, your client's plugin settings and internet access, then reconnect through OAuth. Do not put access tokens, passwords or sign-in codes in plugin configuration, issue reports or chats.
Support and privacy
Setup · Support · Privacy · Terms
Publisher: Work In Progress LLC, doing business as Shape FS. Contact support@shapefs.com. Shape processes stored files for search and tags as described in its privacy policy. Information returned to an AI client is also handled under that client's terms and privacy policy.
The MIT license covers this plugin package. The hosted Shape service and its private application source remain governed by their own terms and licenses. Brand assets remain Shape FS trademarks; the license grants no trademark endorsement rights.
Shape MCP questions
How do I add Shape MCP to Claude Code?
Run claude mcp add --transport http shape-plugin https://shapefs.app/mcp in your terminal. Add --scope user to make it available in every project.
How do I add Shape MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
How do I connect Shape to my AI client?
Connection methods vary by client; for example, Claude users add the Shape connector, while Grok users enter the hosted MCP URL and authenticate via OAuth.
Can an AI agent permanently delete my files?
No, agents cannot permanently delete files; they can only move entries to the Trash, which is recoverable.
Does this require an API key?
No, the connection uses OAuth for sign-in and workspace selection.