About Pullzip
Pullzip (ArchiveFlow) is a local MCP server for inspecting and handling archives, intended for people who need archive contents checked without uploading files. It combines safety analysis, controlled extraction, and repair of garbled CJK and other legacy filenames.
Key features
- 01Summarize archives without extraction
- 02Scan for archive security risks
- 03Search and read archive entries
- 04Extract while blocking unsafe entries
- 05Repair garbled legacy filenames
- 06Create, compare, and test archives
Use cases
- 01Check an archive before opening it
- 02Find and read a file inside an archive
- 03Extract files without overwriting existing ones
- 04Restore garbled filenames in older archives
MCP support
It exposes archive inspection, security scanning, browsing, extraction, filename repair, creation, comparison, and testing tools to MCP clients. Processing runs locally, with access limited to selected folders.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEArchiveFlow — releases
ArchiveFlow lets your AI assistant look inside archives safely: summarize ZIP / 7z / RAR / TAR files without extracting them, rate their safety, search and read files, extract them safely, and repair garbled Korean / Japanese / Chinese / Russian file names.
This repository only hosts installable releases. The source code is not public.
Install (Claude Desktop, Windows)
- Download the latest
archiveflow-<version>.mcpbfrom Releases. - Double-click it, or drag it into Claude Desktop → Settings → Extensions.
- Choose the folders ArchiveFlow may access (default: Downloads) and whether it is read-only.
Then ask Claude, for example: "What's inside Downloads/report.zip? Is it safe to open?"
What it does
| Tool | |
|---|---|
inspect_archive | Summary without extracting + safety rating (safe / caution / danger) |
scan_security | Path traversal, links, zip bombs, disguised programs, macros; deep mode finds prompt-injection text and personal data |
list_entries · search_archive · read_entry | Browse, search names and text, read one file (text is marked as untrusted) |
extract_archive | Safe extraction: unsafe entries are always blocked, nothing is overwritten, plan first |
fix_zip_names | Rewrite garbled legacy file names (CP949, Shift-JIS, GBK, CP866/1251) as UTF-8 |
create_archive · diff_archives · test_archive · engine_info | Create without secrets, compare, verify |
- Everything runs locally on your PC. Files are never uploaded.
- Access is limited to the folders you choose. Passwords never appear on a command line.
- Two independent checks for ZIPs (the engine's view and the names actually stored in the file), nested archives up to two levels, overlapping-entry zip bombs, and a size watchdog during extraction.
- Safety benchmark: 28 crafted malicious or tricky archives — 28/28 flagged, 0 files written outside the target folder.
한국어
ArchiveFlow는 AI 비서가 압축 파일을 안전하게 다루게 해 줍니다. 풀지 않고 요약·안전 판정, 검색·읽기, 안전하게 풀기, 깨진 한글·일본어·중국어 파일명 복구.
설치: Releases에서 archiveflow-<버전>.mcpb를 받아 더블클릭(또는 Claude Desktop → 설정 → 확장 프로그램에 끌어다 놓기) → 허용 폴더 선택.
모든 처리는 내 PC에서만 하며, 파일은 어디에도 올라가지 않습니다. 이 저장소에는 설치 파일만 있고 소스 코드는 공개하지 않습니다.
License
ArchiveFlow is proprietary software — see LICENSE.txt.
Third-party components (including 7-Zip, LGPL) are listed in THIRD_PARTY_NOTICES.txt inside each .mcpb.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.