CrossPaste
Cross-device clipboard sync with a built-in MCP server: the agent reads your copy history, and data never leaves for the cloud
Medium risk
We rate an entry medium when the tool runs code, makes network calls or reads project files. Check what exactly it does before installing.
Why this level
- Exposes clipboard history, which may contain secrets, to the agent
- Syncs clipboard content across devices over the local network
Install
Manual install
Download and install CrossPaste for your OS from the project site, enable the built-in MCP server in settings and connect it to your AI assistant so it can read the clipboard history.
This is third-party code. Review the repository files before installing.
What it does
CrossPaste syncs the clipboard across macOS, Windows and Linux over the local network, end-to-end encrypted and with no cloud. It supports many types: text, color, URLs, HTML, RTF, images and files, with history, auto-cleanup and built-in OCR that recognizes text in images locally. For agents there is a built-in MCP server: it exposes the clipboard history to AI assistants such as Claude through the Model Context Protocol. There is a Chrome extension and a command line for copying, pasting and searching history from the terminal and scripts.
Who it is for. For people who work across devices and want the agent to read their clipboard history locally.
Good fit when
- You want the agent to use your copy history as context
- You want clipboard sync across devices without the cloud
- You want local OCR over copied images
Not a fit when
- You cannot install the desktop app with the built-in MCP server
- The clipboard history may hold secrets you cannot expose to the agent
Example request
Find the last document link I copied in my clipboard historyLimitations
The MCP server is built into the CrossPaste desktop app, so it must be installed. Sync works only over the local network, with no cloud. The clipboard history can capture sensitive content, including passwords, so grant the agent access deliberately and clear the history.
How to disable. Disable the built-in MCP server in CrossPaste settings, remove its entry from the agent config and, if you wish, uninstall the app.
MCP
- Transport
- stdio
- Authentication
- not required
Security check
- Exposes clipboard history, which may contain secrets, to the agent
- Syncs clipboard content across devices over the local network
README in short
The README describes CrossPaste as clipboard sync across macOS, Windows and Linux over the local network, end-to-end encrypted and with no cloud. It supports text, color, URLs, HTML, RTF, images and files, with history, auto-cleanup and local OCR. It highlights a built-in MCP server that exposes the clipboard history to AI assistants, a Chrome extension and a command line. The app is built with Kotlin and Compose Multiplatform and installs by download from the site. AGPL-3.0 licensed.
FAQ
Does data go to the cloud?
No. Sync happens only over the local network with end-to-end encryption, and data stays on your devices.
What does the agent see?
The clipboard history through the built-in MCP server, so clear sensitive entries and grant access deliberately.
Related
A self-hosted knowledge base with block-level references and a built-in MCP server for connecting AI agents to your notes
A CLI for every Google Workspace API with JSON output and agent skills: Drive, Gmail, Calendar, Sheets and more
Local search over Markdown notes, docs and meeting transcripts: keywords, semantic search and reranking, with an MCP server
A task manager for AI-driven development: breaks a PRD into dependent tasks and guides the agent through them via MCP or CLI