Folipost

A post office for your AI agents.

Folipost is a remote MCP server through which agents, and the people they work for, hand documents to one another. Every handover is recorded against the document's checksum, and every document is destroyed on its date.

Add this MCP server to your agent

https://folipost.com/mcp

Rather click than prompt? Sign in to use it in the browser.

quarterly-review.md

24.1 KiB

SHA-256 9f2c0e…b741ab

  1. Sent to analyst@example.orgby your agent, through artifact_send14:00
  2. Fetchedby their agent, through artifact_fetch14:05
  3. Shared with lead@example.orgby you, in the browser 14:12
  4. Not read yet by lead@example.org
6 days left

What your agent can do

Eleven tools, each one call of the same service you use in the browser. An agent sees exactly what you see, nothing more. You consent to reading and to writing separately, and each tool needs the one it is marked with.

Hand over

artifact_sendwrite
Upload a document and hand it to a recipient in one step.
artifact_sharewrite
Hand an uploaded document to one more person.
artifact_revokewrite
Take a share back. The recipient loses access at once.
artifact_uploadwrite
Keep a document for later, without sending it to anyone.

Receive

inbox_listread
See what other people sent you, and what is still unread.
artifact_fetchread
Fetch a document. The sender sees when it was first read.
share_removewrite
Remove a received document from your inbox for good.

Keep track

sent_listread
Every share you made: who read it, who removed it, what you took back.
artifact_listread
Your own documents, with their checksum and end date.
artifact_set_retentionwrite
Keep a document shorter or longer, within the maximum.
artifact_deletewrite
Delete a document for you and everybody it was shared with.

Connecting an agent

Any agent that supports MCP authorization connects the same way. Tested with Claude on claude.ai.

  1. Add the server

    In your agent's settings, add the address above as a remote MCP server or custom connector.

  2. Sign in as yourself

    Your agent sends you to Folipost's sign-in. Use the Google account of your organisation.

  3. Choose what it may do

    Reading and writing are two separate choices. From then on the agent acts under your name, and every act is recorded as done by that agent.

Better than pasting it into the chat

A document pasted into a prompt, attached to an e-mail or left in a shared folder leaves no answer to who had it, and it never goes away.

  • Nobody speaks for someone else

    Folipost knows whom an agent works for from the sign-in, never from what the agent claims.

  • Every handover on record

    Who sent what to whom, through which agent, and when it was first read, tied to the document's SHA-256.

  • Everything ends

    Each document has an end date a few weeks away at most. Then its content is destroyed; the record stays.

Security, thought through

  • OAuth 2.1
  • PKCE
  • RFC 8707
  • RFC 9728
  • MCP 2026-07-28
  • MCP 2025-11-25

  • OAuth 2.1 for every agent

    With PKCE and tokens bound to this server alone. Tokens are stored only as hashes.

  • Your identity, not the agent's word

    A verified address of your organisation, and separate consent to reading and to writing.

  • Checked on every call

    No shareable download links: a revoke or an expiry applies to the very next request.

  • Every act on record

    Who, through which agent, what and to whom, tied to the document's SHA-256. Refused attempts too.

  • Destroyed, and proven gone

    Within a day of the end date, and verified absent from storage. No versions, no backups.

  • Where it stops

    A document someone downloaded, or one an agent read into its context, is a copy outside Folipost. That copy is theirs to delete.

Deliberately small

  • No forwarding

    A recipient cannot pass your document on. They can download it and upload a copy of their own, which is recorded as theirs.

  • No public links, no outsiders

    Every recipient signs in with an address of your organisation. Nobody reaches a document by knowing its link.

  • No archive

    It is a handover, not a document store: no search, no folders, no backups, and no way to stop an expiry.

People use the same inbox

In the browser you drop a file, name the recipients and see who read it. Your agent and you work on the same documents and leave the same record.

Sign in with Google