The MCP server only exposes folders you explicitly approve. API keys stay on your machine — they are not sent to the AI model.
Your MCP client starts the Convertly MCP server locally. The AI model does not receive unrestricted filesystem access — only the folders you approve are exposed through MCP tools.
For a product overview and visual walkthrough, see the MCP & AI agents page.
How it works
Convertly MCP runs in two modes. Choose the one that matches your client and security needs.Local mode (stdio) — recommended
Your MCP client launches the Convertly server as a local process. The server can read and write any folder you list inCONVERTLY_MCP_ROOTS. All filesystem paths are resolved and sandboxed to those roots.
Remote mode (HTTP/SSE)
You start the server manually as an HTTP service. AI agents can use all API-based tools (conversion, compression, docs, cloud storage, jobs) but cannot access your local filesystem. Filesystem tools return an error in this mode.http://localhost:3000/mcp.
HTTP configuration:
CONVERTLY_MCP_HTTP_PORT— port to listen onCONVERTLY_MCP_MAX_SESSIONS— max concurrent SSE sessions (default: 100)CONVERTLY_MCP_SESSION_TIMEOUT_MS— idle session timeout in ms (default: 600000 = 10 min)GET /health— health check endpoint
Client setup
Claude Desktop
Claude Desktop was the first mainstream MCP client and has the largest ecosystem. macOS- Open Claude Desktop
- Click your profile menu → Settings → Developer
- Click Edit Config
- Paste the configuration into
~/Library/Application Support/Claude/claude_desktop_config.json - Fully quit and restart Claude Desktop
- Open Claude Desktop
- Click your profile menu → Settings → Developer
- Click Edit Config
- Paste the JSON below into the file that opens
- Fully quit and restart Claude Desktop
CONVERTLY_API_KEY locally. Do not commit MCP config files that contain real keys.
On Windows, use ; to separate roots and forward slashes inside each path (recommended — avoids JSON escaping):
\\ in JSON:
C:\Users\...) produce invalid JSON and the MCP server may not start.
Paths and approved folders
Convertly MCP only reads and writes paths that fall under folders listed inCONVERTLY_MCP_ROOTS. Everything else — scan_folder, convert_media, forma_ai_transform with filePath, outputPath, and so on — must stay inside those roots.
Root list (CONVERTLY_MCP_ROOTS)
~at the start of a path expands to your home directory (~/Downloads→/Users/you/DownloadsorC:\Users\you\Downloads).- If
CONVERTLY_MCP_ROOTSis omitted, only the MCP server’s current working directory is approved (usually wherever your client launched the process).
Windows paths in JSON config
JSON strings treat\ as an escape character. Prefer forward slashes — Node.js accepts them on Windows:
\U, \D, etc. are not valid escapes) and clients may fail to parse the config.
Paths with spaces do not need extra escaping — keep the whole value in quotes:
C:) is part of the path, not the root separator. Only ; splits multiple roots.
macOS and Linux paths
Use normal absolute paths. Separate multiple roots with::
: inside a single path when you list multiple roots (uncommon on macOS/Linux). If you need a unusual path that contains :, approve a parent folder instead.
Tilde works the same as on Windows:
Paths in tool calls
When the agent passesfolder, filePath, outputFolder, or outputPath to a tool:
- Use an absolute path under an approved root, or a relative path resolved from the server working directory.
- On Windows, forward slashes (
C:/Users/you/file.png) are safest in prompts and tool args; backslashes usually work but agents sometimes emit invalid escapes. - If a tool returns outside approved roots, add the parent directory to
CONVERTLY_MCP_ROOTSand restart the MCP server (or reload the client) so the new env var is picked up.
list_roots to see the resolved allow-list the server is actually using.
Cursor
Cursor supports the samemcpServers format as Claude Desktop and hot-reloads config changes.
Global (all projects):
- Open Cursor
- Settings → Cursor Settings → MCP
- Click Add new MCP server
- Paste the same JSON config into
~/.cursor/mcp.json
.cursor/mcp.json inside your project root:
Cline (VS Code extension)
- Open VS Code with Cline installed
- Click the MCP Servers icon (plug) in the Cline sidebar
- Click Install MCP Server
- Paste the config or use the path:
- macOS/Linux:
~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json - Windows:
%APPDATA%\Code\User\globalStorage\saoudrizwan.claude-dev\settings\cline_mcp_settings.json
- macOS/Linux:
Lovable and other web clients
Web-based clients cannot run stdio servers. Use HTTP/SSE mode instead:http://localhost:3000/mcp into the client’s remote MCP server field.
Environment variables
Tools
Convertly docs
Research before you act. These tools let an agent read Convertly documentation before calling APIs or touching files.Local filesystem
These tools only work in Local (stdio) mode. They require paths insideCONVERTLY_MCP_ROOTS.
Media conversion
CDN URL builder
Forma AI (all plans)
Generative and analysis tools that bill your Forma AI unit quota (included on Free, Starter, Pro, and Business). Use these when the agent or model cannot generate images natively.
Requires
CONVERTLY_API_KEY. Free and Starter hard-cap at the included Forma AI quota; Pro+ supports overage when enabled. See Forma AI and Limits.
AI media tools
Cloud storage
Async jobs
Utilities
Example prompts
These are prompts you can paste directly into an MCP-enabled client. Research then compress:Safety model
The AI model does not receive raw filesystem access.- Path sandboxing: All paths are resolved against
CONVERTLY_MCP_ROOTS. Requests outside approved folders are rejected. - Dry-run by default:
plan_organize_folderandscan_foldernever modify files. - Explicit confirmation:
move_files,rename_files,copy_files,delete_files,delete_cloud_file,rename_cloud_file, andrename_folderrequireconfirm: truebefore executing. - Non-destructive first: Agents can show a plan, get your approval, and then execute.
Troubleshooting
Filesystem tools return “not in approved roots”
- Add the parent folder to
CONVERTLY_MCP_ROOTS(not just the file). - Use the correct separator:
;on Windows,:on macOS/Linux. - On Windows, use forward slashes or escaped backslashes in JSON — see Paths and approved folders.
- Restart the MCP client after editing config so env vars reload.
- Call
list_rootsto confirm what the server resolved.
Invalid MCP config / server won’t start (Windows)
Check JSON escaping.C:\Users\... with single backslashes is invalid JSON. Use C:/Users/... or C:\\Users\\....
