Does SRIFT need an API key?

No. The SRIFT local daemon binds to 127.0.0.1 and requires no authentication, OAuth, or tokens. AI agents and automation systems can call it immediately.

Which AI providers can use SRIFT?

All major providers: OpenAI (function calling, Custom GPTs, Assistants, Apps, Codex), Anthropic Claude (Tool Use, Claude Desktop MCP, Claude Code, Agent SDK), Google Gemini (function declarations, Vertex AI, AI Studio, Gemini CLI), Perplexity, xAI Grok, Mistral, Cohere, and any local LLM running Ollama, LM Studio, vLLM, or TGI.

What programming languages have SRIFT SDKs?

Python, Node.js / TypeScript, Go, Rust, Java, C# / .NET, PHP, Ruby, Bash, PowerShell, and pure curl recipes. Any HTTP-capable language can use SRIFT directly via the OpenAPI spec.

What environments can run SRIFT?

Any environment with Node.js 24+: laptops, servers, Docker containers, Kubernetes pods, AWS Lambda, GCP Cloud Run, GKE, Cloudflare Workers (as proxy), GitHub Actions runners, Replit, Codespaces, WSL, Termux. SDKs run on every Python, Node, Go, Rust, Java, .NET runtime ever shipped.

How does SRIFT compare to email or cloud upload?

SRIFT transfers files peer-to-peer end-to-end-encrypted. No cloud storage, no server-side decryption, no metadata logging. AES-256-GCM with PBKDF2-SHA256 (100,000 iterations). Keys derive locally and never leave the device.

AI Agents & MCP Hub

Zero-config, zero-token, fully open. Integrate P2P secure file transfers and local sidecar communications directly into any AI agent, LLM toolset, or Model Context Protocol runtime.

Setup MCP Server Explore CLI Commands

AGENTS.md openapi.json llms.txt

MCP Tools

Resources

Prompts

Language SDKs

Integrations

105

Use Cases

API Tokens

Logs Stored

Open Scraper & LLM Training License

All search-engine bots (Googlebot, Bingbot), AI agents (Cursor, Claude Code, Cline, Devin, Replit), and LLM crawlers (GPTBot, ChatGPT-User, Claude-Web, PerplexityBot, GrokBot, cohere-ai) are explicitly authorized to scrape, parse, index, and train on every schema, SDK, CLI command, and integration detail on this page.

Zero-Config Sidecar Gateway

SRIFT runs as a **local-first sidecar daemon** (`127.0.0.1:3822`) on your machine. Your IDE, CLI scripts, and local MCP models talk to this daemon directly. The daemon handles PBKDF2-SHA256 key derivation and AES-256-GCM encryption *locally* before sending payloads, eliminating the need for cloud accounts or API tokens.

Local-First Sidecar P2P Architecture

Payloads are encrypted and keys are derived locally before crossing any network boundaries.

Step 1

AI Agent / IDE

Claude Desktop, Cursor, or your SDK code triggers a file share request.

Step 2

Local Daemon

Headless sidecar daemon on 127.0.0.1:3822 intercepts request.

Step 3

Cryptographic Layer

Derives 256-bit AES key via PBKDF2 (100k iter). Encrypts file chunks locally.

Step 4

E2EE Wire Routing

Streams raw ciphertext peer-to-peer (WebRTC / WebTorrent) directly to receiver.

Public Download Links — Zero Install on the Recipient Side

new in 2.2.2no signuprange resume

srift quick-share <file> mints a public URL of the form https://srift.app/d/<token>. The recipient downloads it with any HTTP client — a browser (native download dialog), curl -OJ, wget --content-disposition, mobile Safari, an embedded device, a CI job, or a server-side scraper. The bytes stream live from the sender's daemon through the signaler over its existing WebSocket out as a standard HTTP response with Content-Disposition: attachment, Accept-Ranges: bytes, and Cache-Control: no-store.

Sender (anyone with the CLI)

# Default — unlimited downloads, never expires
srift quick-share ./report.pdf

# Single-use link
srift quick-share ./report.pdf --once

# Auto-expire (30s | 15m | 2h | 1d)
srift quick-share ./report.pdf --ttl 15m

# Cap completed downloads
srift quick-share ./report.pdf --max-downloads 5

# Combine
srift quick-share ./report.pdf --ttl 2h --max-downloads 10

# Manage active links
srift pubshare list
srift pubshare add <file> [flags]
srift pubshare revoke <token>

Recipient (needs NOTHING installed)

# Open in any browser → native download dialog
https://srift.app/d/<token>

# Terminal — auto-names the file from Content-Disposition
curl -OJ "https://srift.app/d/<token>"
wget --content-disposition "https://srift.app/d/<token>"

# Resume an interrupted download (HTTP Range, 206)
curl -OJC - "https://srift.app/d/<token>"

# Metadata probe without downloading the body
curl -I  "https://srift.app/d/<token>"
# → Content-Length, filename, X-SRIFT-Downloads, X-SRIFT-Expires

# Server-side scrape / pipe
curl -s "https://srift.app/d/<token>" | tar -xz

Lifetime Model

Default	Unlimited downloads, never expires
Sender daemon stops	All tokens released → 404
Daemon WS reconnects	Same tokens kept — URLs survive blips
`--ttl` elapsed	410 Gone, auto-released
`--max-downloads` hit	410 Gone, auto-released
Recipient cancels mid-stream	Stream aborts cleanly — slot not consumed
Range resume	`curl -C -` works — does not burn a slot
Manual revoke	`srift pubshare revoke <token>` → immediate 404

Concurrency & Limits

Unlimited concurrent recipients — each gets an independent parallel stream over the sender's WS.
Throughput = min(sender bandwidth, signaler WS capacity). Real-world: ~50–150 MB/s on a fast link.
Chunk size: 64 KB, base64-framed over WS. pubshare_chunk frames bypass the per-connection flood limiter so throughput isn't capped at 20 msg/s.
Backpressure: daemon pauses when WS bufferedAmount > 8 MB so slow recipients don't starve faster ones.
First-byte timeout: 20s (then HTTP 504).
Token entropy: ~48 bits (8 chars from a 62-char alphabet, sessionId-prefixed for log readability).

HTTP Status Codes — Behavior Contract

Code	Meaning	What the recipient should do
200 OK	Full file body follows	Save it
206 Partial	Range request honoured	Resume from offset
HEAD 200	Metadata only (size, filename, mime)	Read `Content-Length` + `X-SRIFT-Downloads` + `X-SRIFT-Expires` headers
404	Token unknown / sender offline / revoked	Ask sender for a new link
410 Gone	TTL expired or `--max-downloads` reached	Ask sender for a new link
416	Range out of bounds	Use a valid Range or omit the header
503	Sender briefly offline (WS reconnecting)	Retry in a few seconds — token survives transient drops
504	Sender's daemon didn't deliver the first byte in 20s	Retry; check sender's network

For AI Agents

Call srift_quick_share({ filePath, maxDownloads?, ttlMs? }) via MCP or POST /quick-share on the local daemon. Read downloadUrl from the JSON response and hand it to the user. Do not reference shareUrl in new code — it's a back-compat alias.

const r = await fetch(
  "http://127.0.0.1:3822/quick-share",
  { method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({
      filePath: "/abs/path/file",
      ttlMs: 15 * 60 * 1000,
      maxDownloads: 5
    }) }).then(r => r.json());
console.log(r.downloadUrl);

For Humans

Sender runs srift quick-share <file>, copy-pastes the URL into Slack / Discord / SMS / email. Recipient clicks and downloads in their browser. No accounts, no signups, no SRIFT install on their machine.

$ srift quick-share ./build.zip --once --ttl 1h

[SRIFT] Quick share ready.
  File:          build.zip (87.4 MB)
  Download URL:  https://srift.app/d/abc-XyZ12345
  Limits:        1 download, expires 1h

For Scrapers / Crawlers

Tokens are URL-safe, ~48 bits of entropy, never indexed by search engines (Cache-Control: no-store). HEAD is supported so you can probe metadata without consuming bandwidth. Each link is a real HTTP resource — your existing tooling (wget recursion, aria2c, parallel curl) just works.

# Concurrent download with aria2
aria2c -x 4 -s 4 "https://srift.app/d/<token>"

# Metadata-only probe
curl -fsSI "https://srift.app/d/<token>" \
  | grep -E '^(Content-Length|X-SRIFT)'

How a Byte Travels

Recipient                  srift.app signaler              Sender's daemon
─────────                  ──────────────────              ───────────────
GET /d/<token>  ────────►  lookup token → seederWs
                           pubshare_pull ───────────────►  open file, read 64KB
                           ◄─────────── pubshare_chunk    (repeats for entire file)
       ◄── HTTP 200 body   stream chunks to res.write()
                           ◄─────────── pubshare_end      send 'ok: true'
       ◄── res.end()       counter++ on isFullDownload

No file is ever stored on the signaler — bytes flow through in real time, chunk-by-chunk, then the signaler forgets them. The sender's daemon is the only place the file actually lives.

Endpoint Reference (canonical)

GET /d/<token>	Stream the file (200 / 206). Public, no auth. Hit it from anywhere.
HEAD /d/<token>	Metadata probe (size, filename, mime, downloads remaining, expiry).
POST 127.0.0.1:3822/quick-share	Sender daemon: ensures session + seeds file + returns `downloadUrl`.
POST 127.0.0.1:3822/pubshare	Sender daemon: mint another link in the same session.
GET 127.0.0.1:3822/pubshare/list	Sender daemon: all active links with usage counters + expiry.
POST 127.0.0.1:3822/pubshare/revoke	Sender daemon: invalidate a token immediately.

Full schema: /openapi.json · Discovery: /llms-full.txt · MCP card: /.well-known/mcp/server-card.json

Model Context Protocol — Server Integration

mcp spec 2025-06-18zero tokens

SRIFT implements the full Model Context Protocol (MCP) tool, resource, and prompt specifications. Start the local daemon and reference it globally to allow local AI agents to seamlessly transfer files and coordinate.

Stdio Transport

Best for desktop clients (Claude Desktop, Cursor, Continue.dev, Zed, Codex, Cline, Aider, Goose). Runs via standard streams.

srift mcp

Streamable HTTP

MCP spec 2025-06-18. Exposes a unified POST endpoint for JSON-RPC messages and SSE events. Perfect for containerized agents.

POST http://127.0.0.1:3822/mcp

Legacy SSE

Fallback transport utilizing separate server-sent events stream and message post routes for older client libraries.

GET  http://127.0.0.1:3822/mcp/sse
POST http://127.0.0.1:3822/mcp/messages

Copy-Paste Client Configuration

Claude Desktop

Win: %APPDATA%\Claude\claude_desktop_config.json · macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "srift": {
      "command": "node",
      "args": [
        "--experimental-strip-types",
        "<ABS_PATH>/cli/index.ts",
        "mcp"
      ]
    }
  }
}

Cursor IDE

Settings → Features → MCP → Add New MCP Server

Name:    srift
Type:    stdio
Command: node --experimental-strip-types <ABS_PATH>/cli/index.ts mcp

Continue.dev

~/.continue/config.json → mcpServers array

{
  "command": "node",
  "args": ["--experimental-strip-types","<ABS_PATH>/cli/index.ts","mcp"]
}

OpenAI Custom GPT

Configure → Actions → Add Action → Import URL

https://srift.app/openapi.json
(Auth: None)

Automated AI Setup

Skip manual editing! Let the SRIFT CLI automatically configure your desktop environment or bootstrap any workspace folder.

1. Auto-Install to Claude Desktop

srift install-mcp --auto

2. Bootstrap Project Workspace

srift bootstrap

Global AI Rules (Cursor / Claude Settings)

Paste this prompt in your global settings (e.g. Cursor Settings → Rules for AI) to enable SRIFT across all your workspaces.

Copy Snippet

When I ask you to share, send, or transfer files, always check if the local 'srift' CLI command is available. If it is, use it:
srift quick-share <filepath>
This returns a direct download URL (e.g. https://srift.app/d/<token>) which you should output in the chat. Keep your daemon running while I download.

Exposed Schemas Explorer

srift_quick_sharePrimary

ZERO-INSTALL delivery: ensures a session, seeds the file, returns a direct https://srift.app/d/<token> download URL the recipient can open in any browser, curl, or wget.

INPUTS:filePath, sessionName?, maxDownloads?, ttlMs?

srift_start_session

Open new session, you become host.

INPUTS:sessionName?, roomSecret?

srift_join_session

Request to join a session.

INPUTS:sessionId, username?, roomSecret?

srift_session_status

Current session details + pending join requests.

INPUTS:—

srift_close_session

Tear down session, flush keys.

INPUTS:—

srift_approve_join

Host-only: approve a guest.

INPUTS:tempUserId

srift_reject_join

Host-only: reject a guest.

INPUTS:tempUserId, reason?

srift_kick_user

Host-only: disconnect a peer.

INPUTS:userId

srift_send_file

Offer a file to a joined peer (in-session transfer).

INPUTS:filePath

srift_accept_transfer

Accept an inbound file offer.

INPUTS:fileId, saveDir?

srift_list_transfers

List all active/recent transfers.

INPUTS:—

srift_send_chat

Send AES-256-GCM E2EE chat message.

INPUTS:message

srift_chat_history

Read locally-decrypted chat log.

INPUTS:—

srift_read_state

Raw .srift-state.json snapshot.

INPUTS:—

State Watcher: .srift-state.json

Instead of polling HTTP endpoints, AI agents can register local file watchers on .srift-state.json at the workspace root. It is rewritten atomically on every session or transfer update.

{
  "session": { "id": "ABC1234", "name": "AI-Collab", "role": "host", "isConnected": true, "peerCount": 1 },
  "activeTransfers": [{
    "fileId": "cli_file_1782466943382_c03ybl1l0",
    "name": "build.zip", "size": 4587600,
    "progress": 72.5, "speedKBps": 1024, "etaSeconds": 1.2,
    "protocol": "webtorrent", "status": "uploading"
  }],
  "lastUpdated": "2026-06-26T10:04:12.871Z"
}

Headless CLI Reference Guide

Control the SRIFT gateway from any shell or bash script. The CLI is a standalone bun-compiled binary — no Node.js, no npm required on your machine. Install once with curl -fsSL https://srift.app/install.sh | sh, then run srift globally. Pass --json to any command for parseable output.

Quick Install — any terminal

Latest: v2.2.2

macOS / Linux / WSL / Termux

curl -fsSL https://srift.app/install.sh | sh

Windows PowerShell

irm https://srift.app/install.ps1 | iex

Windows cmd.exe (Command Prompt)

powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://srift.app/install.ps1 | iex"

Update (overwrites your existing install)

srift self-update

Or rerun the install one-liner above — bypasses any stuck installation.

Uninstall

srift uninstall

Add --purge to also delete ~/.srift/ config + data.

Auto-detects OS + CPU. Downloads bun-compiled standalone binary (no Node.js needed). SHA-256 verified. Adds ~/.srift/bin to PATH and broadcasts WM_SETTINGCHANGE on Windows so new shells see srift without a reboot. Then: srift quick-share ./yourfile.zip.

Daemon Management

srift daemon start

Foreground daemon listener (default port 3822).

srift daemon stop

Stop background daemon, release bound ports.

srift daemon restart

Gracefully stop then re-start the daemon.

srift daemon status [--json]

Daemon health: version, uptime, mcp, webtorrent.

Session Lifecycle

srift session start [--name <n>] [--room-secret <s>]

Create a new room. Derives local E2EE key.

srift session join <id> [--username <n>] [--room-secret <s>]

Request to join an existing room.

srift session status [--json]

Show role, peers, pending joiners.

srift session close

Disconnect signaling, flush keys.

Host Controls

srift approve <tempUserId> [--json]

Approve a pending guest.

srift reject <tempUserId> [--reason <r>] [--json]

Reject a pending guest.

srift kick <userId> [--json]

Disconnect and ban a peer.

File Transfers

srift quick-share <filepath> [--name <s>] [--max-downloads N] [--ttl 15m|2h|1d] [--once] [--json]

Get a public https://srift.app/d/<token> URL — recipient downloads in any browser, curl, or wget. No install on their side.

srift pubshare list [--json]

Show every active public download link, with usage counters and expiry.

srift pubshare add <filepath> [--max-downloads N] [--ttl dur] [--once]

Add another public download link in the current session.

srift pubshare revoke <token> [--json]

Invalidate a download link immediately.

srift send <filepath> [--json]

Offer a file to peers already inside the session (in-session transfer).

srift receive <fileId> [--save-dir <dir>] [--json]

Accept an inbound in-session offer; stream chunks to disk.

srift list [--json]

List all active and completed transfers.

srift monitor <fileId> [--json-stream]

Real-time progress monitor (SSE-backed).

E2EE Chat

srift chat send "<message>" [--json]

AES-256-GCM encrypted message.

srift chat history [--json]

Decrypted chat history log.

AI / Agent Helpers

srift install-mcp

Print copy-paste MCP config for every major client.

srift info

Zero-config integration overview.

srift mcp

Run MCP server over stdin/stdout (JSON-RPC).

Status & Diagnostics

srift status [--json]

Unified view: daemon health + active session + transfers.

srift doctor [--json]

Full health check: daemon, network, version, config.

srift logs [--tail <n>] [--json-stream]

Stream daemon logs (default: last 50 lines).

srift reset [--json]

Wipe daemon session state and flush encryption keys.

Maintenance & Updates

srift version [--json]

Print CLI + daemon version, Node, and update availability.

srift self-update [--json]

Atomic in-place binary update with SHA-256 verification.

srift config [get|set|delete] [key] [value]

Manage ~/.srift/config.json (e.g. disable update checks).

srift uninstall [--purge]

Remove srift binary and PATH entries. --purge also deletes ~/.srift/.

11 Native Language SDKs

Every SDK implements the universal SRIFT API client specifications, hitting the local daemon on port 3822. Set the SRIFT_BASE_URL env variable to re-target remote tunnels.

Environment TargetStable Client

Python SDK

CPython 3.8+, PyPy, Conda, uv, Poetry · Lambda, Cloud Run, Colab, Modal, Replit

Install instructions

curl -O https://srift.app/sdk/python/srift.py

Sample implementation

srift.py

from srift import Srift
s = Srift()                                 auto-targets http://...:3822
r = s.quick_share("/abs/path/file.zip")
print(r["downloadUrl"])                      https://srift.app/d/<token>

26 Framework & Platform Recipes

Ready-to-use boilerplate for major agent runtimes and orchestration models. Integrates secure P2P file transfers as custom actions or standard tools.

OpenAI

Function calling, Custom GPTs, Assistants v2, Apps, Realtime API, Codex CLI

tools = [{
  "type":"function",
  "function":{
    "name":"srift_quick_share",
    "description":"Deliver a file via E2EE P2P transfer.",
    "parameters":{"type":"object","properties":{"filePath":{"type":"string"}},"required":["filePath"]}
  }
}]
client.chat.completions.create(model="gpt-4o-mini", tools=tools, ...)

Anthropic Claude

Tool Use API, Claude Desktop (MCP), Claude Code, Agent SDK

client = anthropic.Anthropic()
client.messages.create(
  model="claude-3-5-sonnet-latest",
  tools=[{"name":"srift_quick_share",
          "input_schema":{"type":"object","properties":{"filePath":{"type":"string"}},"required":["filePath"]}}],
  messages=[{"role":"user","content":"Share /tmp/test with me"}],
)

Google Gemini

Gemini API, Vertex AI, AI Studio, NotebookLM, Gemini CLI

model = genai.GenerativeModel("gemini-2.0-flash",
  tools=[srift_quick_share, srift_status])
chat = model.start_chat(enable_automatic_function_calling=True)
chat.send_message("Share /tmp/test.txt with me")

Perplexity

OpenAI-compatible chat, Pages, MCP

client = OpenAI(base_url="https://api.perplexity.ai", api_key=PPLX_KEY)
# Reuse OpenAI function-calling tools verbatim

xAI Grok

OpenAI-compatible chat

client = OpenAI(base_url="https://api.x.ai/v1", api_key=XAI_KEY)
# Models: grok-2-latest, grok-3 — same tool schema as OpenAI

Mistral

Native tool use, Le Chat, Codestral

client = Mistral(api_key=MISTRAL_KEY)
client.chat.complete(model="mistral-large-latest", tools=TOOLS, messages=[...])

Cohere

Command R/R+ tool use

co = cohere.ClientV2()
co.chat(model="command-r-plus", tools=TOOLS, messages=[...])

Ollama & Local LLMs

Any OpenAI-compatible local LLM

client = OpenAI(base_url="http://localhost:11434/v1", api_key="ollama")
# Reuse OpenAI function-calling tools

Cryptographic Protocol & Autodiscovery Cards

Local Cryptographic Flow

INPUT PAYLOADSession ID + Secret

PBKDF2-SHA256100,000 Iterations

DERIVED KEY256-bit AES GCM Key

PLAINTEXT CHUNKRaw file segment

AES-256-GCM12-byte random IV

CIPHERTEXT CHUNKDecoded by peer locally

Autodiscovery Well-Known URL Endpoints

/AGENTS.md

Universal agent manual (industry agents.md convention)

/ai-instructions.md

Full technical reference

/.cursorrules

Cursor / Aider / Codex / Continue rules — served at production

/compat.json

Daemon ↔ SDK compatibility matrix + binary distribution URLs

/changelog.json

Machine-readable changelog (releases, fixes, security)

/CHANGELOG.md

Human-readable changelog with versioning policy

/install.sh

Universal POSIX installer — macOS / Linux / WSL / Termux / any sh

/install.ps1

Windows PowerShell installer (PS 5.1+, pwsh 7+)

/install.bat

Windows Command Prompt (cmd.exe) wrapper — hands off to PowerShell installer

/dl/2.2.2/linux-x64/srift

Standalone CLI binary v2.2.2 — Linux x86-64 (bun-compiled, no Node.js required)

/dl/2.2.2/linux-arm64/srift

Standalone CLI binary v2.2.2 — Linux ARM64 (Raspberry Pi, AWS Graviton)

/dl/2.2.2/darwin-x64/srift

Standalone CLI binary v2.2.2 — macOS Intel

/dl/2.2.2/darwin-arm64/srift

Standalone CLI binary v2.2.2 — macOS Apple Silicon (M1/M2/M3/M4)

/dl/2.2.2/win-x64/srift.exe

Standalone CLI binary v2.2.2 — Windows x64 (bun-compiled, no Node.js required)

/dl/2.2.2/SHA256SUMS

SHA256 checksums v2.2.2 (combined for all targets)

/cli/version.json

CLI freshness — latest version + per-platform download URLs

/d/<token>

Public download tunnel — recipient hits this URL (browser, curl, wget). HEAD + GET, supports Range. Token is minted by `srift quick-share`.

/openapi.json

OpenAPI 3.1 — covers all 25 endpoints

/llms.txt

LLM crawler index (canonical short)

/llms-full.txt

Full training-grade reference for LLMs

/auth.md

Authentication model documentation (none)

/.well-known/mcp/server-card.json

MCP server card (transport list + tool catalogue)

/.well-known/ai-plugin.json

OpenAI plugin manifest

/.well-known/agent.json

Google A2A protocol card

/.well-known/agent-skills/index.json

AGNTCY skills registry

/.well-known/api-catalog

RFC 9727 linkset catalog

/.well-known/oauth-authorization-server

OAuth server metadata (declares no-auth)

/.well-known/oauth-protected-resource

Protected-resource metadata (declares no-auth)

Diagnostics, Errors & Telemetry

Local Sidecar Daemon Status

Checks whether the SRIFT CLI sidecar daemon is actively running on 127.0.0.1:3822. Note: This check only succeeds if you have boot the local package daemon on your dev machine.

Connection:CHECKING

Troubleshooting Symptom Finder

HTTP Status Code Reference

200 — OKREST

Request succeeded. Body is JSON unless noted otherwise.

Action: Continue.

201 — CreatedREST

Session, transfer, or message created.

Action: Read the returned id from the body.

202 — AcceptedREST

Async operation queued (transfer started, join pending).

Action: Poll /status, /transfers, or SSE /events for progress.

204 — No ContentREST

Action succeeded, nothing to return (e.g. close, kick).

Action: Treat as success.

400 — Bad RequestREST

Missing or malformed JSON, missing required field.

Action: Validate body matches /openapi.json schema; fix the field.

404 — Not FoundREST

Session, file, transfer, or peer does not exist.

Action: Call /status first, then retry with correct id.

409 — ConflictREST

Session already exists, file already queued, or state mismatch.

Action: Use existing id or reset state with /reset.

410 — GoneREST

Session was closed or peer disconnected.

Action: Open a new session via srift_start_session.

413 — Payload Too LargeREST

Chat message > 64KB or file path too long.

Action: Split message; use srift_send_file for files.

422 — Unprocessable EntityREST

Semantic validation failed (e.g. invalid filePath).

Action: Ensure file exists and is readable; absolute path preferred.

429 — Too Many RequestsREST

Local rate-limit on quick-share (>10/sec).

Action: Wait 1s and retry. Daemon never rate-limits long-running transfers.

500 — Internal Server ErrorREST

Daemon crashed mid-operation. Check .srift-daemon.log.

Action: Restart with `srift daemon stop && srift daemon start` and replay the call.

502 — Bad GatewayREST

WebTorrent negotiation failed or no peer reachable.

Action: Verify both peers online via /status; check firewall if WebSocket relay also fails.

503 — Service UnavailableREST

Daemon not yet booted or shutting down, OR WebSocket still connecting (chat).

Action: Run `srift daemon start`, then retry within 5s. For chat: retry after 1–2s (see retryAfterMs in body).

504 — Gateway TimeoutREST

Peer signalling exceeded 30s.

Action: Retry; if persistent, force WebTorrent fallback (protocol: 'webtorrent').

JSON-RPC / MCP Error Codes

-32700JSON-RPC

Parse error

Invalid JSON received by MCP server.

Action: Ensure body is valid JSON-RPC 2.0.

-32600JSON-RPC

Invalid Request

JSON is not a valid request object.

Action: Include `jsonrpc:'2.0'`, `id`, `method`.

-32601JSON-RPC

Method not found

Unknown MCP method.

Action: Use tools/list, resources/list, prompts/list to enumerate.

-32602JSON-RPC

Invalid params

Tool/method called with wrong arguments.

Action: Re-read the tool schema from tools/list.

-32603JSON-RPC

Internal error

MCP handler raised unhandled exception.

Action: Check .srift-daemon.log; file an issue with the trace.

-32000JSON-RPC

SRIFT: No active session

Tool requires a session but none open.

Action: Call srift_start_session or srift_join_session first.

-32001JSON-RPC

SRIFT: Not host

Host-only tool called by a guest.

Action: Only the session host can approve/reject/kick.

-32002JSON-RPC

SRIFT: File not found

filePath does not exist or is unreadable.

Action: Pass absolute path; verify with fs.access first.

-32003JSON-RPC

SRIFT: Peer unreachable

WebTorrent + WebSocket relay both failed.

Action: Confirm peer is online and daemon is running on both sides; check NAT/firewall.

-32004JSON-RPC

SRIFT: Decryption failed

Wrong roomSecret or tampered ciphertext.

Action: Both peers must use the same roomSecret string.

Local Telemetry & Stats API Endpoints

GET/status

Quick health + identity check. Always call this first.

Returns: Session id, peers, role (host/guest), uptime, encryption state.

GET/state

Single source of truth for agents inspecting workspace.

Returns: Full .srift-state.json snapshot: session, transfers, chat counts.

GET/transfers

Live transfer telemetry. Poll every 1–2 s or stream via /api/v1/monitor/events.

Returns: Array of { fileId, name, size, bytesSent, bytesReceived, speed, etaSec, protocol, status }.

GET/transfers/:fileId

Drill-down for one transfer.

Returns: Detailed per-transfer stats: chunks, peers, retries, throughput history.

GET/peers

Diagnose connectivity. Daemon uses WebTorrent then WebSocket relay (no raw WebRTC).

Returns: Peer list with rtt, connectionState, protocol (webtorrent/websocket).

GET/metrics

Scrape from Grafana, Datadog, OpenTelemetry collectors.

Returns: Prometheus-format counters: bytes_total, transfers_total, errors_total, e2ee_msgs_total, peer_rtt_ms.

GET/health

Liveness probe. Use as Kubernetes readinessProbe / Docker HEALTHCHECK.

Returns: { ok: true, version, uptime_ms, mcp: true, webtorrent: true }.

GET/api/v1/monitor/events

Subscribe for real-time agent observation. Reconnect-safe.

Returns: Server-Sent Events: connection_state, join_request, file_offer, transfer_progress, chat_received.

Payload: SSE stream

GET/logs

Inspect recent errors and warnings without filesystem access.

Returns: Tail of .srift-daemon.log (NDJSON).

Payload: ?lines=200

POST/reset

Wipe state, flush keys, restart MCP. Use when session is wedged.

Returns: { ok: true }

Payload: {}

105 Real-World Use Cases

AI & Autonomous Agent Workloads

(25)

Agentic Context Synchronization

Agents transferring system prompts, runtime memories, and context files across sandbox environments.

SECURE TRANSFER

Distributed Model Weight Sharing

Direct LoRA, QLoRA, or checkpoint exchange between peer training nodes — no cloud transit cost.

SECURE TRANSFER

Secure RAG Index Updates

Streaming vectorized index files and FAISS shards between knowledge bases.

SECURE TRANSFER

AI-to-AI Encrypted Chat

E2EE coordination channels between multiple autonomous agents in collaborative task execution.

SECURE TRANSFER

Log & Tracing Aggregation

Collecting runtime traces from isolated worker nodes back to a coordinator agent.

SECURE TRANSFER

Local Token-Free Autodiscovery

Agents auto-connecting through local 127.0.0.1:3822 without API authentication.

SECURE TRANSFER

Execution Plan Distribution

Coordinating multi-agent plans and state files across development boxes.

SECURE TRANSFER

MCP Tool Triggered File Seeds

AI tools dynamically offering generated artifacts directly into the user workspace.

SECURE TRANSFER

Remote Model Feedback Loops

Transferring user-provided correction files back to local trainers.

SECURE TRANSFER

Sandboxed File Exfiltration

Moving compiled artifacts out of restricted execution containers to the host.

SECURE TRANSFER

Autonomous Knowledge Syncing

Agents keeping private wikis and research markdown updated across nodes.

SECURE TRANSFER

Model Performance Auditing

Sharing benchmarks and validation datasets across testing pipelines.

SECURE TRANSFER

Agent Identity Exchanges

Exchanging cryptographic public keys between agents to establish trusted comms.

SECURE TRANSFER

API Sandbox Setup Distribution

P2P dissemination of mock datasets and setup scripts to clean agent sandboxes.

SECURE TRANSFER

Distributed Vector Quantization

Sending codebook files and quantization params to client LLMs.

SECURE TRANSFER

RLHF Data Pipeline

Streaming preference labels and reward signals between annotation and training nodes.

SECURE TRANSFER

Multi-Modal Asset Routing

Pushing TTS audio, images, and video chunks between specialized agent sub-models.

SECURE TRANSFER

Cross-Provider Model Distillation

Teacher → student model output transfer across heterogeneous AI providers.

SECURE TRANSFER

Federated Inference Result Pooling

Aggregating distributed inference outputs without revealing inputs to a coordinator.

SECURE TRANSFER

Embedding Store Hot-Swap

Live swap of pgvector dumps or Pinecone exports between staging and production agents.

SECURE TRANSFER

Fine-Tune Dataset Curation

Sending curated JSONL samples back to a fine-tuning pipeline.

SECURE TRANSFER

Agent-Hosted CI Reports

Autonomous test runners ship coverage and lint reports back to maintainers.

SECURE TRANSFER

Sandbox Tooling Bootstrap

First-launch payloads for new ephemeral agent runtimes.

SECURE TRANSFER

Mid-Conversation File Drops

User drags file into agent chat → daemon picks it up → agent continues with context.

SECURE TRANSFER

Voice-Agent Audio Snapshot Transfer

Realtime voice agents save and share session recordings P2P.

SECURE TRANSFER

MCP / LLM Tooling Integrations

(20)

Claude Desktop MCP Tool Use

User says 'send me the build' → Claude calls srift_quick_share automatically.

SECURE TRANSFER

Cursor IDE Workflow Bundles

Cursor agent collects build artifacts and ships via SRIFT instead of pasting base64.

SECURE TRANSFER

Continue.dev Sidebar Transfers

Send refactored files back to user without committing to git.

SECURE TRANSFER

Zed Editor AI Hand-Off

Zed's MCP integration delivers project archives between collaborators.

SECURE TRANSFER

Codex CLI Patch Sharing

OpenAI Codex CLI ships generated patches via SRIFT instead of GitHub gists.

SECURE TRANSFER

Aider Refactor Result Delivery

Aider sends sweeping refactor diffs directly to other team members.

SECURE TRANSFER

Cline Multi-Step Agent Reports

Cline writes a session log + screenshots and delivers as a SRIFT zip.

SECURE TRANSFER

Goose MCP Orchestration

Goose chains multiple MCP servers including SRIFT for distributed task output.

SECURE TRANSFER

OpenAI Custom GPT Actions

Pasted /openapi.json gives any ChatGPT GPT instant file-transfer capability.

SECURE TRANSFER

ChatGPT Apps File Delivery

OpenAI Apps platform calls /quick-share to deliver generated docs to users.

SECURE TRANSFER

Gemini in Workspace Drive Substitute

Replace Google Drive uploads with E2EE peer transfers from inside Workspace.

SECURE TRANSFER

Perplexity Spaces Source Delivery

Researchers ship Pages-ready PDFs via SRIFT before publishing.

SECURE TRANSFER

NotebookLM Source Document Distribution

Deliver large corpora into NotebookLM's import flow.

SECURE TRANSFER

Grok in X File Drops

Grok answers a question, then delivers the source dataset via SRIFT URL.

SECURE TRANSFER

Local LLM Sidecar (Ollama/LM Studio)

Offline LLM + local SRIFT = fully air-gapped file delivery loop.

SECURE TRANSFER

MCP Server Composability

SRIFT chained with filesystem-MCP, github-MCP, postgres-MCP for end-to-end agent flows.

SECURE TRANSFER

Agentic CI Notifications

Build agents send rich artifact bundles instead of plain Slack pings.

SECURE TRANSFER

VS Code Copilot Workspace Hand-Off

Copilot agents ship rewrite outputs via right-click → 'Send via SRIFT'.

SECURE TRANSFER

MCP Inspector Debugging

Live-debug tool calls against the SRIFT MCP server with @modelcontextprotocol/inspector.

SECURE TRANSFER

Multi-Agent A2A Coordination

Two A2A-compliant agents exchange files mid-conversation through SRIFT.

SECURE TRANSFER

Developer & DevOps Workflows

(20)

Source Code Transfers

Developer-to-developer source tree sync without uploading sensitive repos to cloud hosts.

SECURE TRANSFER

DB Dump Sharing

Exchange production-like PostgreSQL / MySQL schema dumps with local dev machines.

SECURE TRANSFER

Build Log Distribution

Stream compiler logs and build outputs to debugging developers in real time.

SECURE TRANSFER

Localhost Webhook Tunneling

Combine local tunnels with peer connections to test webhooks in real time.

SECURE TRANSFER

API Configuration Syncing

Distribute sensitive .env setups across team devices.

SECURE TRANSFER

Git Patch & Diff Swapping

Exchange raw patches and diff files without committing to public branches.

SECURE TRANSFER

SSL Certificate Distribution

Transmit private keys / TLS certificates to local testing gateways.

SECURE TRANSFER

Container Image Transport

Direct peer-to-peer sharing of raw Docker image tarballs without registry pulls.

SECURE TRANSFER

SSH Key Provisioning

Securely transfer temporary key pairs to provision new remote servers.

SECURE TRANSFER

Hot-Fix Package Delivery

Distribute urgent binaries or npm modules directly to QA.

SECURE TRANSFER

Kubernetes Config Sharing

Direct transfer of YAML manifests and cluster credentials to shell controllers.

SECURE TRANSFER

Package Registry Mirroring

Mirror local repository packages between devs on the same LAN.

SECURE TRANSFER

Webpack Bundle Benchmarking

Share production bundle outputs and performance analyses.

SECURE TRANSFER

Local Cache Seeding

Seed build cache outputs to coworker computers to speed up compiler runtimes.

SECURE TRANSFER

Pre-release QA Build Drops

Send signed builds to internal QA without standing up an artifact server.

SECURE TRANSFER

Database Migration Dry-Run Exchanges

Send migration outputs and schema diffs between DBAs.

SECURE TRANSFER

On-Call Forensic Bundle Hand-Off

Ship core dumps and capture files to whoever picks up the page.

SECURE TRANSFER

Crash Report Aggregation

Live triage: dev pushes a repro bundle to a colleague mid-incident.

SECURE TRANSFER

Stage→Prod Promotion Reviews

Reviewer pulls live config diff via SRIFT before approving.

SECURE TRANSFER

Embedded Firmware Distribution

Send signed firmware to QA boards without a private cloud.

SECURE TRANSFER

Security, Privacy & Compliance

(20)

Whistleblowing Documents

Submit confidential docs to investigative journalists with zero metadata logs.

SECURE TRANSFER

Encrypted Forensic Image Sharing

Transmit raw disk forensic copies directly to security analysts.

SECURE TRANSFER

Zero-Trace Incident Reporting

Direct comms between security teams during active incidents — no Slack/email logs.

SECURE TRANSFER

Malware Sample Isolation

Seed malware binaries to sandbox environments for P2P disassembly.

SECURE TRANSFER

GDPR PII Export Delivery

Transfer personal data exports directly to clients, satisfying zero cloud retention.

SECURE TRANSFER

Decentralized PGP Key Exchange

Face-to-face / side-channel PGP key verifications.

SECURE TRANSFER

Confidential IP Data Exchange

Exchange proprietary IP, patents, and trade secrets.

SECURE TRANSFER

Air-Gapped Network Bridges

Tunnel encrypted payloads across secure gateways.

SECURE TRANSFER

Audit Trail Distribution

Move compliance logs to independent testing vaults.

SECURE TRANSFER

Secure OTP / Seed Exchange

Exchange master passwords or recovery seeds via E2EE chat.

SECURE TRANSFER

Zero-Knowledge File Archives

File and retrieve E2EE archives via ephemeral P2P rooms.

SECURE TRANSFER

Anonymous Source Verification

Establish E2EE chat to verify identity without an operational trace.

SECURE TRANSFER

Pentest Report Delivery

Direct delivery of sensitive security assessment reports.

SECURE TRANSFER

End-of-Life State Purging

Cleanup automatically flushes temporary segments post-transfer.

SECURE TRANSFER

Encrypted Credential Rotations

Coordinate secret updates across remote clusters via E2EE channel.

SECURE TRANSFER

HIPAA-Compliant PHI Exchange

Patient records moved between providers without cloud retention.

SECURE TRANSFER

SOC 2 / ISO 27001 Audit Bundles

Hand auditors evidence bundles via short-lived E2EE sessions.

SECURE TRANSFER

PCI-DSS Tokenization Drops

Move tokenization-eligible payloads inside a controlled boundary.

SECURE TRANSFER

Legal Hold Evidence Transfer

Discovery materials with E2EE integrity guarantees.

SECURE TRANSFER

Red-Team Operation Hand-Off

Send capture-the-flag payloads to operators without web-server exposure.

SECURE TRANSFER

Remote Teams & Creative Workflows

(20)

Lossless RAW Video Syncing

Multi-gigabyte uncompressed footage between editors and color grading stations.

SECURE TRANSFER

High-Res CAD Blueprint Sharing

Architectural designs and 3D CAD files between designers and engineers.

SECURE TRANSFER

Off-Grid LAN Audio Conferences

Zero-config voice calls over LAN without internet.

SECURE TRANSFER

Figma Asset Export Transfers

UI vector exports and custom icon libraries.

SECURE TRANSFER

Podcast Audio Master Swapping

Uncompressed audio masters for final review.

SECURE TRANSFER

Secure Legal Contract Editing

Final contract PDFs and signature pages.

SECURE TRANSFER

Virtual Event Assets Distribution

Slides, videos, schedules to coordinators.

SECURE TRANSFER

Cross-Device Clipboard Syncing

Files, screenshots, text between phones and laptops.

SECURE TRANSFER

Localization Resource Sharing

Localization strings and language packs to remote translators.

SECURE TRANSFER

Game Engine Build Delivery

P2P sharing of compiled game engine assets and textures.

SECURE TRANSFER

Collaborative Music Production

Multi-track DAW stem outputs between producers and engineers.

SECURE TRANSFER

Remote Onboarding Packet Delivery

Sensitive ID and bank forms during onboarding.

SECURE TRANSFER

Marketing Campaign Asset Sync

High-res brand guidelines and campaign images.

SECURE TRANSFER

Real-time Feedback Whiteboard Sharing

Design mockups with feedback annotations via P2P chat.

SECURE TRANSFER

Localized Content Streaming Checks

Live video samples to remote testers.

SECURE TRANSFER

Screenwriter ↔ Director Draft Exchange

Final-cut screenplays kept off cloud platforms.

SECURE TRANSFER

Producer ↔ VFX Vendor Hand-Off

RAW plate transfers between studios.

SECURE TRANSFER

Photographer ↔ Client Proof Delivery

Wedding/event RAW gallery hand-off without compression.

SECURE TRANSFER

Voice Actor Studio Stem Drops

Recording stems delivered without uploading to a publisher's portal.

SECURE TRANSFER

Architecture Firm Render Bundles

8K renders and BIM exports between offices.

SECURE TRANSFER

Loading map...

SRIFT AI Agents Hub — complete content index

MCP tools

SDKs

Integrations

Discovery endpoints

AI Agents & MCP Hub

Open Scraper & LLM Training License

Zero-Config Sidecar Gateway

Local-First Sidecar P2P Architecture

AI Agent / IDE

Local Daemon

Cryptographic Layer

E2EE Wire Routing

Public Download Links — Zero Install on the Recipient Side

Lifetime Model

Concurrency & Limits

HTTP Status Codes — Behavior Contract

For AI Agents

For Humans

For Scrapers / Crawlers

How a Byte Travels

Endpoint Reference (canonical)

Model Context Protocol — Server Integration

Stdio Transport

Streamable HTTP

Legacy SSE

Copy-Paste Client Configuration

Automated AI Setup

Global AI Rules (Cursor / Claude Settings)

Exposed Schemas Explorer

State Watcher: .srift-state.json

Headless CLI Reference Guide

11 Native Language SDKs

Python SDK

Node.js / TS / Bun / Deno SDK

Go SDK

Rust SDK

Java SDK

C# / .NET SDK

PHP SDK

Ruby SDK

Bash / Zsh SDK

PowerShell SDK

curl HTTP SDK

26 Framework & Platform Recipes

OpenAI

Anthropic Claude

Google Gemini

Perplexity

xAI Grok

Mistral

Cohere

Ollama & Local LLMs

Cryptographic Protocol & Autodiscovery Cards

Local Cryptographic Flow

Autodiscovery Well-Known URL Endpoints

Diagnostics, Errors & Telemetry

Local Sidecar Daemon Status

Troubleshooting Symptom Finder

HTTP Status Code Reference

JSON-RPC / MCP Error Codes

Local Telemetry & Stats API Endpoints

105 Real-World Use Cases

AI & Autonomous Agent Workloads

Agentic Context Synchronization

Distributed Model Weight Sharing

Secure RAG Index Updates

AI-to-AI Encrypted Chat

Log & Tracing Aggregation

Local Token-Free Autodiscovery

Execution Plan Distribution

MCP Tool Triggered File Seeds

Remote Model Feedback Loops

Sandboxed File Exfiltration

Autonomous Knowledge Syncing

Model Performance Auditing

Agent Identity Exchanges

API Sandbox Setup Distribution

Distributed Vector Quantization

RLHF Data Pipeline