Look twice.Find the gem.

AI agents and MCP servers, each published with its source and what the checks found.

Marketplace

  • Everything
  • AI agents
  • Apps
  • MCP servers
  • Templates
  • What people want
  • What changed this week
  • The verification standard
  • The ooruby Index
  • Servers that publish no source
  • Reliability guides
  • What the catalogue holds
  • Sell here

Our library

  • Everything, in one place
  • Guides
  • Glossary
  • Calculators
  • Checklists and cheat sheets
  • Community

ooruby

  • Home
  • For teams
  • Site status
  • Company projects
  • RSS feed

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.

AI agentsAppsMCP serversTemplatesWantedCommunityOur library
Sign inSell
Catalogue/Agents/Files

Files

hasna · Agent

Files gives an AI agent an index of your files wherever they live: local folders, S3 buckets and Google Drive, which it can sync into S3 or a local folder. You can tag, search and retrieve files from a command line or an MCP server. Its context-pack commands assemble a bounded set of excerpts with citations, so your agent reads the relevant parts instead of whole files. Hosted use needs an API key, local SQLite mode is an explicit opt-in, and Drive sync needs Google sign-in through the separate connectors tool.

Written by ooruby from the README of @hasna/files 0.5.0.

Not claimed by its maker. Is this yours? Prove it and answer the findings

Why it's useful

Your agent can look up and quote from files spread over folders, S3 and Google Drive without loading each whole file.

What you could do with it

  1. 1Sync your Google Drive into an S3 bucket or a local folder and keep each file's Drive source.
  2. 2Search your indexed files for a phrase and build a context pack of the matching excerpts with citations.
  3. 3Choose a minimal, standard or full tool profile to control what the MCP server exposes.

Written from its documentation: what it says it can do, not what our checks found.

FIagentData & analytics

Maintenance

Not measured

No release date is on record for this package yet. The nightly publisher check records one as it reaches each npm package, about once every ten nights.

Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured

Not yet tested
Command execution is bounded
inventory
synchronous shell execution (scripts/knowledge-installed-smoke.ts:157)
An inventory of where the code starts another program, not a verdict on this row: whether each one runs a fixed program or whatever it is handed takes a reading by hand.

Published because it was found. A finding is information about where the limits are, not a verdict that the software is unsafe.

What this does not cover

  • ·Everything. Treat it as you would software from anywhere else.

Receipt history: every signed receipt for every version of this listing, and what changed between them.

In its maker's words

Agent-first file management — index local folders and S3 buckets, sync Google Drive, tag, search, and retrieve files via CLI + MCP

Compare with

  • Clineside by side
  • Graftside by side
  • Agent Tailside by side
Compare all 4

How far this has been checked

Static scanned

What it establishes
Its published package, or for a hosted server its source repository at a recorded commit, was read file by file, without running it, by every check in our current scan.
What it does not
How it behaves when it runs, or anything the scan does not read yet: several rubric checks, the repository's history, and compiled code in folders named dist or build. For a hosted server, that the endpoint runs the code that was read. The ooruby Index sets out exactly what was read.
Exactly what was read
Version 0.5.0, the file with digest sha512-vWcQsvPRC25Oietf2KGDO/hTcAN0X13TlxJnEdu1XDqns+ZU376TEO+xa9YX/p2Nkp+1pnSPTG7O65vHWqA6sA==, as the registry publishes it. A published version cannot be replaced, so this names the same bytes for anyone who checks.
Authentication
Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.
How the rungs work

Adding it

Run it with:

npx -y -p @hasna/files@0.5.0 files

Pinned to 0.5.0, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.

Where this came from

Registry
npm
Package
@hasna/files
Version read
0.5.0
Resolved
2026-10-10
Open the source(opens in a new tab)

No build provenance published. The repository above is the one the publisher declared, and nothing links it to the package you would install. That is not a mark against this listing, since most packages are published this way, but it is a check nobody can run.

The badge, if this is your listing

It renders the current rung (static scanned) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.

[![ooruby: static scanned](https://ooruby.com/api/badge/hasna-files)](https://ooruby.com/market/hasna-files)

About this listing

Kind
Agent
Category
Data & analytics
Pricing
Free
Sandbox
No
Hosted
No
Updated
2026-10-10
Price
Free
Get it freeVisit maker
Rating
no reviews yet
0 want this so far
Sign in to vote

Sign in to watch this listing and hear when its version, rung or findings change.

More from hasna

See the storefront
MEMCP serverDeveloper tools
Clean scanStatic scanned
Offered as a command line tool, an MCP server and a library, and runs on your machine once you opt in to local mode. Memories have a scope and a category such as preference, fact or procedural.

Mementos

hasna
Free

Gives your agent a place to save, search and recall memories, organised by project, agent and scope.

91.8k installs/moApache-2.0
SEagentInfrastructure
Clean scanStatic scanned
Talks to the hosted Hasna secrets API by default and needs an API key, with an opt-in encrypted vault on your own machine. Use it from the command line, an MCP server or an SDK.

Secrets

hasna
Free

Stores agent secrets and injects them into commands as environment variables without printing them.

369.9k installs/moApache-2.0
COagentDeveloper tools
2 findingsStatic scanned
Agents can also take timed locks on shared resources, see who has read a message and pull compact channel digests. It works through a shared Hasna API and needs an API key.

Conversations

hasna
Free

Lets AI agents and people message each other in Slack-like channels and DMs from the command line.

122.2k installs/moApache-2.0

Similar agents

All agents
PMagentData & analytics
2 findingsStatic scanned
Memories live in named banks, shared globally or kept per project. Recall can use local embeddings or an OpenAI-compatible endpoint, or fall back to full-text search only, and a language model is optional.

Pi Mnemopi

oh-my-pi
Free

Lets your agent remember facts in a local SQLite database and recall them later with a plain query.

321.4k installs/moMIT
COagentData & analytics
5 findingsStatic scanned
It is meant for Node.js server applications, not for code that runs in a browser, on AWS Lambda or Fargate, on Azure App Services or on Google Cloud Run.

Collector

instana
Free

Collects metrics and trace data from your Node.js server applications for monitoring in Instana.

135.4k installs/moMIT
OKagentData & analytics
2 findingsStatic scanned
A desktop app is available for Windows, Linux and Apple silicon Macs. The command line tool, which needs Git, sets up the folder, registers the MCP server, serves the same web app locally and opens it in your browser.

Open Knowledge

inkeep
Free

Turns a Markdown folder into a local knowledge base with an editor and an MCP server for AI tools.

89.5k installs/moGPL-3.0-or-later

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.