Undisk MCP: safe file memory for AI agents.

Every write creates an immutable version. Any file restored in <50 ms. AI makes mistakes, so Undisk keeps recovery instant. Policy guardrails, secret detection, and tamper-evident audit trails. MCP-native.

WORKS WITH   Claude Code · Cursor · GitHub Copilot · Windsurf · VS Code


# Why Undisk?

⟲ Immutable Versioning

Every write creates an immutable version. Restore any single file to any prior state — surgical undo in <50 ms without affecting other files.

🧰 25 MCP Tools

Complete file workspace — read, write, move, copy, search, diff, patch, undo, redo, squash, and more. All via the Model Context Protocol.

🛡 Policy Engine

Path ACLs, extension rules, size limits, secret detection, and content moderation — enforced before the write hits storage.

🤖 Multi-Agent Ready

Scoped workspaces with isolated versioning per agent. Run multiple agents without cross-contamination. File locks and handoff notes built in.

📦 Cross-Platform SDKs

Install from npm, PyPI, crates.io, or Go. First-class packages for every major ecosystem.

🔐 Enterprise SSO

SAML/OIDC single sign-on, organization management, and role-based access control for teams.


# What is Undisk MCP?

Undisk MCP is a remote file workspace for AI agents built on the Model Context Protocol. Every file mutation an agent makes creates an immutable version, so any single write can be surgically undone in under 50 milliseconds without affecting other files.

No VM rollbacks. No "restore everything." Just precise, per-file undo with a tamper-evident audit trail that satisfies EU AI Act Article 12 record-keeping requirements.


# MCP Tools

25 tools exposed via the Model Context Protocol. Every write is versioned.

read_file
write_file
create_file
append_log
upload_session
delete_file
move_file
list_files
search_files
list_versions
list_changes
restore_version
get_diff
policy
vault_secret
share_with_public
audit_trail
workspace_checkpoint
workspace_collaborate
webhook
federation
open_ui
discover_tools_and_capabilities
list_workspaces
run_in_sandbox

Full tool reference →


# How It Works

1. Install

Pick your ecosystem and install in one command. Works with Claude Code, Cursor, VS Code Copilot, Windsurf, and any MCP-compatible client.

2. Agent Writes

Your agent calls MCP tools — Undisk creates an immutable version on every write with policy checks, size limits, and secret scanning enforced server-side.

3. Undo Anything

Something goes wrong? Undo any single file to any prior version — without rolling back other files. Full audit trail preserved.


# Use Cases

Audit-Ready Compliance Workspaces

Use Undisk when agents draft or revise KYC, MiFID, policy, or evidence documents and your team needs exact diffs, tamper-evident audit history, and reversible restores.

Agent Refactors Before Git

Let a coding agent rewrite a large file set in Undisk first, review the result with get_diff, restore only the broken files, then move the approved set into your repository.

Shared Agent Memory Across Tools

Different AI agents — Copilot, Cursor, Claude Code, Windsurf — can all append logs, search notes, tail recent context, and keep working from the same durable workspace.

Multi-Agent Ops Pipelines

Shared workspaces where ingestion, transformation, and reporting agents need clear boundaries and safe handoffs. Policy engine limits each agent to its own paths.

Infra Change Windows With Rollback

Use agents to prepare config updates, secrets, and rollout artifacts without losing rollback discipline. Workspace checkpoints give you a clean baseline.

See all use cases →


# Quick Start

Claude Code

npx @undisk-mcp/setup-claude

npm (TypeScript/JavaScript)

npm install @undisk-mcp/sdk

Python

pip install undisk-mcp

Rust

cargo add undisk-mcp

Go

go get github.com/kiarashplusplus/undisk-mcp-go

See all 16 packages →


# Architecture

Cloud-to-Cloud Performance. Undisk runs on Cloudflare Workers next to your LLM, not at the user's edge. Typical agent ↔ storage latency under 20ms via Streamable HTTP or WebSocket.

Storage. File metadata and version history live in per-workspace Durable Object SQLite. File content is stored in R2 as SHA-256 content-addressed immutable blobs with deduplication. Auth and billing use D1.

Every write → immutable version → SHA-256 hash-chained audit entry. Any version → restore in <50 ms (metadata flip, no blob copy).


# Pricing

Start free. Upgrade when you need more workspaces, storage, or retention.

Free

$0
free forever
  • 1 workspace
  • 100 MB storage
  • 1,000 ops / day
  • 30-day retention
  • Secret detection
  • Community support

Pro

$29
per month
  • 5 workspaces
  • 10 GB storage
  • 50,000 ops / day
  • 180-day retention
  • Policy engine & ACLs
  • EU AI Act compliance

Team

$99
per month
  • 25 workspaces
  • 100 GB storage
  • 500,000 ops / day
  • 365-day retention
  • SSO / SAML
  • Multi-member access

Sign up for free →


# Frequently Asked Questions

What is Undisk MCP?
Undisk MCP is a remote file workspace for AI agents. Every file mutation creates an immutable version, so any single write can be surgically undone in under 50ms without affecting other files. It uses the Model Context Protocol (MCP) for standardized agent-to-tool communication.
What is MCP (Model Context Protocol)?
MCP is an open protocol that standardizes how AI applications connect to external data sources and tools. Undisk implements MCP natively so any MCP-compatible client — Claude Code, Cursor, VS Code, Windsurf — can use it without custom integrations.
Which AI tools work with Undisk?
Undisk works with Claude Code, Cursor, GitHub Copilot, Windsurf, VS Code, and any MCP-compatible AI client. SDKs are available for TypeScript, Python, Rust, and Go.
Is there a free tier?
Yes. The free tier includes 1 workspace, 100 MB storage, 1,000 operations per day, and 30-day version retention. No credit card required.
How does undo work?
Every write creates an immutable version entry. Undoing is a metadata pointer flip that promotes an older version back to the head by creating a fresh version entry. The operation completes in under 50ms with no blob copying. Other files remain unaffected.
Is Undisk compliant with EU AI Act?
Undisk provides tamper-evident audit trails that satisfy EU AI Act Article 12 record-keeping requirements. Pro and above tiers offer retention periods that meet Article 26(6) minimums. See the compliance documentation for details.

Your agents are writing files right now. Make every write reversible.

Free tier included. No credit card. Set up in under 2 minutes.

Get Started Free