Uploadcare for AI agents

Uploadcare handles file uploading, storage, processing, and delivery for web and mobile apps, used by developers who don't want to run their own file infrastructure. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect Uploadcare See the 34 actions ↓

Files and storageAPI keyMCP + RESTuploadcare.com

AUDIT LOG · UPLOADCAREPOLICY: acme-support

09:41:07 · claude · u_8f2read

uploadcare.list_files

List Uploadcare Files✓ allowed · 212ms

09:41:08 · claude · u_8f2read

uploadcare.list_groups

List Uploadcare Groups✓ allowed · 164ms

09:41:09 · claude · u_8f2write

uploadcare.create_webhook

Create Uploadcare webhook✓ approved · approved by user

09:41:12 · claude · u_8f2destructive

uploadcare.delete_files

Batch Delete Uploadcare Files✕ blocked · policy: deny

EVERY UPLOADCARE CALL, ON THE RECORD

01 · USE CASES

What agents do in Uploadcare.

Get file info

Pull metadata for an uploaded file as a read-only check.

Run a virus scan on a file

Check an uploaded file for malware before it's used elsewhere.

Confirm before batch-deleting files

Check with the user before deleting multiple files at once, since that removes them from storage permanently.

02 · ACTIONS

34 Uploadcare actions, graded by risk.

Every Uploadcare action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

Look things up. Allowed by default.

uploadcare.list_files
List Uploadcare Files
uploadcare.list_groups
List Uploadcare Groups
uploadcare.get_file_info
Get Uploadcare File Info
uploadcare.list_webhooks
List Uploadcare Webhooks
uploadcare.get_group_info
Get Uploadcare Group Info
uploadcare.get_project_info
Get Uploadcare Project Info
uploadcare.get_file_metadata
Get File Metadata
uploadcare.get_file_metadata_key
Get File Metadata Key Value
uploadcare.get_url_upload_status
Get URL Upload Status
uploadcare.get_clamav_scan_status
Get ClamAV Scan Status
uploadcare.get_uploaded_file_info
Get Uploaded File Info
uploadcare.get_file_group_info_upload
Get File Group Info (Upload API)
uploadcare.get_aws_rekognition_execution_status
Get AWS Rekognition Execution Status
uploadcare.check_aws_rekognition_moderation_status
Check AWS Rekognition Moderation Status

write

Create and change things. Allow, or ask the user first.

uploadcare.create_webhook
Create Uploadcare webhook
uploadcare.update_webhook
Update Uploadcare webhook
uploadcare.create_file_group_upload
Create File Group (Upload API)
uploadcare.update_file_metadata_key
Update File Metadata Key
uploadcare.store_file
Store Uploadcare File
uploadcare.image_mirror
Mirror Uploadcare Image
uploadcare.rotate_image
Rotate Image
uploadcare.copy_file_local
Copy Uploadcare File to Local Storage
uploadcare.upload_from_url
Upload File from URL
uploadcare.store_batch_files
Batch Store Files
uploadcare.store_single_file
Store Single Uploadcare File
uploadcare.execute_clamav_scan
Execute ClamAV virus scan
uploadcare.start_multipart_upload
Start Multipart Upload

destructive

Delete, cancel or archive. Ask first, or deny outright.

uploadcare.delete_files
Batch Delete Uploadcare Files
uploadcare.delete_group
Delete Uploadcare Group
uploadcare.delete_webhook
Delete Uploadcare Webhook
uploadcare.delete_single_file
Delete Uploadcare File
uploadcare.delete_webhook_by_url
Delete Uploadcare Webhook by URL
uploadcare.delete_file_metadata_key
Delete File Metadata Key
uploadcare.check_remove_bg_status
Check Remove.bg Status

03 · HOW IT WORKS

Uploadcare in three steps.

01Your users connect UploadcareThey add their Uploadcare api key on Arc0 Connect, under your brand. It goes straight into the vault.
02You set the rulesReads run, writes like “create Uploadcare webhook” can wait for the user, and “batch Delete Uploadcare Files” can be denied outright.
03Any agent can actYour agent calls Uploadcare through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.

POLICY.TS

await arc0.policies.set('uploadcare', {
  read: 'allow',
  write: 'ask',        // create_webhook
  destructive: 'deny',  // delete_files
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2

04 · AUTH AND DATA

How Uploadcare connects.

Users add their Uploadcare api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

The same Uploadcare connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH: API key
CREDENTIALS: Per-tenant encrypted vault
MODEL SEES: Results only, never credentials
AUDIT LOG: Every call, on every plan

05 · WORKS WITH

Use Uploadcare from any agent.

Claude

ChatGPT

Cursor

Codex

VS Code

OpenAI Agents SDK

Claude Agent SDK

Vercel AI SDK

Mastra

LangGraph

06 · RELATED

More files and storage apps.

Google Drive104 actions

Archive.org26 actions

Flotiq10 actions

WordPress.com10 actions

ALL FILES AND STORAGE APPS →

07 · FAQ

Uploadcare and Arc0, answered.

Q01

Can I use Uploadcare with Claude, ChatGPT or Cursor?

Yes. Connect Uploadcare to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Uploadcare actions you allow.

Q02

How do users connect Uploadcare?

Users add their Uploadcare api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

Q03

Which Uploadcare actions can my agent take?

34 in total: 14 read, 13 write and 7 destructive, such as “create Uploadcare webhook”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Uploadcare?

Yes. Actions like “batch Delete Uploadcare Files” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Uploadcare too?

Yes. The same Uploadcare connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Uploadcare into your agent.

Your users connect Uploadcare once, under your brand. Your agent gets 34 actions behind your policies, with every call on the record.

Connect Uploadcare Browse all apps →

Free to build · MCP + REST · Audit log on every plan