mcpField
H
HaoyouBox Publish

HaoyouBox Publish

Local
haoyoubox.comFiles & Storage0Updated 2w ago
RepositoryVisit website

About HaoyouBox Publish

HaoyouBox Publish is an Agent Skill for publishing one local HTML or Markdown file as an expiring, password-protected browser link. It includes the open Skill and documentation; the hosted service and server source are not in the repository.

Key features

  1. 01Publish one HTML or Markdown file
  2. 02Create password-protected expiring links
  3. 03Support Chinese or English recipient pages
  4. 04Return link, password, and actual expiry
  5. 05Store publish token after device approval

Use cases

  1. 01Share a report page for limited-time access
  2. 02Send recipients a password-protected document
  3. 03Publish a local HTML file through a compatible agent

MCP support

The input labels this a server, but the README describes an Agent Skill for compatible AI agents and does not specify an MCP interface.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "com-haoyoubox-publish": {
      "command": "npx",
      "args": [
        "-y",
        "haoyoubox-mcp"
      ],
      "env": {
        "HAOYOUBOX_TOKEN": "<HAOYOUBOX_TOKEN>"
      }
    }
  }
}
Run commandnpx -y haoyoubox-mcp
Environment variables to set
HAOYOUBOX_TOKENSecretOptional publish-only HaoyouBox Agent token

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmhaoyoubox-mcp1.0.0

Tools

1

Saved tool list · updated 1w ago

ParameterTypeRequiredDescription
pathstringYesExplicit path to one local HTML or Markdown file
localeenumNoReceiver interface language; inferred locally when omitteden | zh
passwordstringNoOptional local share password; generated locally when omitted
expiryHoursintegerNoShare duration in hours; the service returns the actual expiry

Details

From the project README

HaoyouBox Agent Skill

中文说明

Publish one local HTML or Markdown file to HaoyouBox from a compatible AI agent. The Skill creates an expiring, password-protected browser link and returns the complete link, visible password, and actual expiry.

This repository contains the open Agent Skill and its documentation. The hosted HaoyouBox service and server source are not part of this repository.

Install

Codex, Claude Code, Cursor, and other supported agents

Use the cross-agent Skills installer:

npx skills add cheng-big/haoyoubox-agent-skill --skill haoyoubox-publish -g

Review the Skill before you approve installation. Restart or reload your agent if it does not discover the Skill immediately.

Gemini CLI
gemini skills install https://github.com/cheng-big/haoyoubox-agent-skill --path skills/haoyoubox-publish

Gemini CLI asks for installation consent. Use /skills list after installation to confirm that haoyoubox-publish is enabled.

Manual installation

Copy the skills/haoyoubox-publish directory into a Skill location supported by your agent, such as ~/.agents/skills/haoyoubox-publish.

The current hosted copy remains available at haoyoubox.com/agent/SKILL.md.

Use

Ask your agent:

Publish report.html to HaoyouBox and create a password-protected link that expires in 24 hours. Use English for the receiver page. Return the complete link, password, and actual expiry together.

For a Chinese receiver page:

把 report.html 发布到好友盒，生成 24 小时密码保护链接。接收页使用中文。请一起返回完整链接、密码和实际到期时间。

On first use, the agent opens a HaoyouBox device approval flow. You sign in to HaoyouBox and approve the device. The agent then stores the publish token in its private credential store.

What It Publishes

  • One explicit .html, .htm, .md, or .markdown file.
  • A fixed browser-ready version on HaoyouBox.
  • A password-protected link with a server-enforced expiry.
  • A Chinese or English receiver interface.

The Skill does not upload directories, ZIP files, hidden files, environment files, keys, symlinks, or an entire workspace. It does not read upload history, delete pages, revoke links, or manage accounts.

Security

  • Review the Skill before installation.
  • Device approval always requires an explicit user action.
  • The publish token must stay in the agent's private credential store.
  • The raw share password is derived locally. HaoyouBox receives a salt and verifier, not the raw password.
  • The complete share link includes the password for convenient prefill. Treat the complete link as one sensitive access credential.
  • Do not publish files that contain secrets, personal data, private keys, or environment variables.

See SECURITY.md for vulnerability reporting and token-response steps.

Product

Recipients open the generated link in a browser. They do not need to install this Skill or create a HaoyouBox account.

Contributing

See CONTRIBUTING.md. Run npm test before opening a pull request.

License

The files in this repository are licensed under the Apache License 2.0. Use of the hosted HaoyouBox service remains subject to the product's published terms and policies.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.