MCP connector reference

How the sharable.link connector connects, what it can do, and its limits. Setting it up for the first time? The step-by-step guide is shorter.

The server

  • URL: https://sharable.link/mcp, a remote MCP server over Streamable HTTP. Nothing to install.
  • Every request needs an OAuth 2.1 bearer token issued by sharable.link for that URL. Without one the server answers 401 with a WWW-Authenticate header that points to its protected-resource metadata at /.well-known/oauth-protected-resource.
  • Clients register themselves with Dynamic Client Registration and use PKCE (S256). Tokens are checked for issuer, audience (this URL only), expiry and scope on every call.

Connecting

  1. In Claude, open the sharable.link listing in the connector directory and click Add. Or go to Settings → Connectors → Add custom connector and paste the URL above, exactly, with no trailing slash.
  2. Sign in with Google or Microsoft. That creates a free sharable.link account the first time.
  3. Review what Claude may do on the consent screen and click Allow.

In Claude Code: claude mcp add --transport http sharable https://sharable.link/mcp, then run /mcp to sign in. Cursor, Cline and Windsurf take the same URL in their MCP settings.

Publishing through the connector always needs a signed-in account: every page it publishes belongs to a person. People who open a page don't need an account, unless the page is shared only with specific people.

Scopes

  • pages:read: list the account's pages.
  • pages:write: publish, update, replace and unpublish them. It covers reading too.
  • offline_access: a refresh token, so Claude stays connected without asking you to sign in again.

A call to a tool its token's scope doesn't cover gets 403 naming the scope it needs. So does any call from a suspended account.

Tools

share_htmlPublish page

Publishes an HTML page and returns its link. Optionally with a password, or shared only with named email addresses or company domains.

Scope pages:write · not read-only · not destructive · not idempotent · open world

update_pageUpdate published page

Replaces the content of a page the account owns. The link stays the same. Can also change or remove the password, or change who the page is shared with.

Scope pages:write · destructive · idempotent · open world

unshare_pageUnpublish page

Removes a page the account owns. Its link returns 404 straight away.

Scope pages:write · destructive · idempotent · open world

upload_filePublish a file

Publishes or replaces a page from an HTML file in Claude's environment, up to 25 MB. Returns a short script that sends the file and prints the link.

Scope pages:write · destructive · not idempotent · open world

list_my_pagesList my published pages

Lists the account's pages with their links, view counts, who can view them, and when they were last updated.

Scope pages:read · read-only · idempotent · open world

A tool that changes a page works only on pages the signed-in account owns. A page that isn't yours gets the same answer as one that doesn't exist, so the tools can't be used to find out which links are taken.

Limits

  • HTML sent inside a tool call (share_html, update_page) can be up to about 4.5 MB, the most one request can carry.
  • upload_file sends a file of up to 25 MB, in parts, and the browser upload takes the same size.
  • A page has a password or a list of people who can open it, never both.
  • A list can hold up to 100 email addresses and company domains.
  • Connector requests are rate-limited per account and per network, at around 60 a minute per account. Going over gets 429 with a Retry-After header.

Removing pages and access

  • Pages stay live until you remove them. Unpublish one with unshare_page or from your dashboard; the link returns 404.
  • Disconnect the connector in Claude under Settings → Connectors. That revokes Claude's access; your pages stay live.
  • Deleting your account, from the dashboard, deletes every page it published straight away.

Abuse and takedowns

  • What can't be published, such as phishing, malware, or other people's personal information, is in the terms of use.
  • Anyone can report a page, without an account, with the report form. Every report reaches our team by email.
  • A page taken down for breaking the terms serves 410 with a notice saying so, and its owner can no longer change or remove it. An account can be suspended, which takes down every page it published and stops it publishing.
  • Every page is tied to the account that published it.

Contact

Questions: email nazar@sharable.link. To add the connector now: Add Claude Connector.