Atlas / MCP servers / skyzhao1223 / zspace-cli

zspace-cliCAUTION

Name: zspace-cli
Author: skyzhao1223

mcp/skyzhao1223/zspace-cli

MCP server by skyzhao1223 · agent skills · ai agent · claude · Audited 2026-10-08

⚑ Report / re-scan Source ↗

Agent Skill + zero-config CLI/SDK/MCP for ZSpace (极空间) NAS — no password, no SSH

Verdict

CAUTION

Grade

Trust score

87 /100

Exposed tools

5 4r · 0w · 1d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

English · 简体中文

[](https://pypi.org/project/zspace-cli/) [](https://pypi.org/project/zspace-cli/) [](https://github.com/skyzhao1223/zspace-cli/actions/workflows/ci.yml) [](https://glama.ai/mcp/servers/skyzhao1223/zspace-cli)

Manage your 极空间 (ZSpace) NAS from the terminal or AI agents — no password, no SSH, no DDNS.

mcp-name: io.github.skyzhao1223/zspace-cli

Just keep the ZSpace desktop client logged in on macOS. 📖 How large-file sliced upload was born: 一次 1.4GB 备份引发的逆向 (zh, CSDN) · CLI guide: 极空间 NAS 命令行管理指南 (zh, CSDN)

**Beginner guide** (no coding required) · Skills — incl. 9 cross-NAS organizer skills for AI agents · 中文文档

Install

pip install zspace-cli        # base
pip install "zspace-cli[mcp]" # optional MCP support
zs check                      # ✓ reads the desktop client login state

Prerequisite: the ZSpace desktop client is running and logged in on macOS.

Quick start

zs ls /sata11/my/data/影视
zs find "权力的游戏"                  # ful

Read from source at commit 110e933a5a68OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (pypi)

claude mcp add zspace-cli -- None zspace-cli==0.1.10

Exposed tools (5)

4 read · 0 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`zspace_check`	read	Check whether the ZSpace NAS is reachable through the local desktop
`zspace_disk_stats`	read	Return raw disk statistics reported by the ZSpace NAS.
`zspace_info`	read	Return detailed metadata for one file or directory on the ZSpace NAS.
`zspace_pool_info`	read	List every storage pool on the ZSpace NAS with its name and capacity.
`zspace_remove`	destructive	Permanently delete one or more files/directories from the ZSpace NAS.

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (9 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (12)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

docker-compose.yml:14

#   - Linux: either use `network_mode: host` (and ZS_BASE_URL=http://127.0.0.1:13579)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

zspace_remove

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.gitmodules

.gitmodules

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose