MCP Checkrclone
io.github.rclone-ui/rclone
About rclone
rclone is an MCP server published by the GitHub account rclone-ui. MCP server for the Rclone RC API, with selectable toolsets.
It runs on your own machine: your AI client starts it from the npm package rclone-mcp at version 1.0.0.
It asks for one secret: RCLONE_PASS. Give it a key with the least access that still works.
Version 1.0.0 was published on 8 February 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 9 automated checks on the registry entry and the package code: 7 pass, 0 warn, 0 fail, 2 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
RCLONE_URL | No | No | Rclone RC daemon URL |
RCLONE_USER | No | No | HTTP Basic Auth username |
RCLONE_PASS | No | Yes | HTTP Basic Auth password |
RCLONE_TOOLSETS | No | No | Comma-separated list of toolsets to enable (default, all, or specific: core, config, operations, sync, jobs, vfs, mount, etc.) |
RCLONE_READ_ONLY | No | No | Set to 1 to disable write tools |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/rclone-ui/rclone-mcp |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for 1 secret: RCLONE_PASS |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account rclone-ui |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Install scripts | Pass | rclone-mcp@1.0.0 runs nothing at install |
| Code red flags | Pass | Read 4 files in rclone-mcp@1.0.0: no obfuscation, encoded execution, credential reads or data-collection endpoints found |
| Text aimed at the AI | Pass | No hidden characters or instructions to the AI in 4 files, including comments and the README |
Popularity & health: 45 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
1 forks, 0 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.rclone-ui/rclone |
|---|---|
| Publisher | GitHub account rclone-ui |
| How the name is verified | Name verified via GitHub account rclone-ui. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | npm rclone-mcp 1.0.0 (stdio) |
| Version | 1.0.0 |
| Published | |
| Last updated | |
| Source repository | https://github.com/rclone-ui/rclone-mcp |
| Website | None linked |
| Category | Search & web (assigned by keyword rule, not by hand) |