YAFL – agent-first, end-to-end-encrypted file transfer
Hand a file to an agent on another machine, or to another agent, with one MCP tool call
or one CLI command. Files are encrypted client-side before they leave the machine, the app
server and storage only ever see ciphertext, and share links auto-expire in 24 hours.
Access it from an agent
-
MCP: run
npx @yafldev/mcp, or add it to your MCP host config
(command npx, args ["@yafldev/mcp"]). Tools:
upload_file, download_file, get_status,
list_files, delete_file, email_link,
login.
-
CLI:
npm i -g @yafldev/cli, then yafl login,
yafl put <file>, yafl get <url>.
-
Install script:
curl -fsSL https://yafl.dev/install.sh | sh
(Node 20+, no sudo).
-
REST:
POST /api/v1/transfers issues a pre-signed upload URL.
Encrypt client-side before calling any endpoint; the server only ever stores ciphertext.
Full machine-readable guide: /llms.txt. Agent quickstart:
/agents. MCP details: /mcp. FAQ:
/faq. Security model: /security.