CozyZip

Product Introduction

1. Definition: CozyZip is a native macOS archive utility software designed for Apple Silicon hardware running macOS 26 or later. Classified under file management and developer productivity software, it functions as a comprehensive GUI, command-line tool, and Model Context Protocol (MCP) server for previewing, creating, and extracting various archive formats.
2. Core Value Proposition: CozyZip exists to eliminate security vulnerabilities and organizational clutter associated with handling compressed files. By allowing users to inspect archive contents before extraction, blocking path traversal attacks, stripping out Mac-specific metadata (.DS_Store, __MACOSX), and integrating directly with Terminal and AI clients via MCP, CozyZip provides a secure, transparent, and developer-friendly alternative to native macOS archive utilities.

Main Features

1. Advanced Archive Preview & Safety Check: CozyZip scans directory trees without writing data to the disk. It flags potentially dangerous file types—such as shell scripts, executables, and extensions with deceptive names—providing a plain-language assessment to alert users before extraction.
2. Path Traversal & Symlink Guardrails: To protect the host operating system, CozyZip automatically blocks path traversal entries (e.g., zip slips utilizing ../) and malicious symlinks. Extraction utilizes an isolated staging area to verify paths and catch skipped or blocked entries.
3. Multi-Format Extraction & Creation: The application extracts a vast array of standard and developer-centric formats, including ZIP, 7z, RAR, TAR, GZIP, BZIP2, XZ, Zstandard, ISO, DMG, DEB, RPM, and PKG. It creates clean ZIP, 7z, and TAR.GZ archives, applying atomic file replacement protocols so that existing archives are only overwritten after the new file successfully writes.
4. AES-256 Encryption & Privacy Controls: Users can lock ZIP and 7z archives using AES-256 encryption. For 7z formats, CozyZip supports filename encryption to keep the structural contents list private from unauthorized viewers.
5. Terminal CLI & AI MCP Server: Built specifically for modern developer workflows, the app includes a native command-line tool and a local Model Context Protocol (MCP) server. This enables users to run structured archive inspections and selectively authorize AI clients to execute safe creation and extraction commands.

Problems Solved

1. Pain Point: Unvetted archives frequently harbor hidden scripts, application binaries disguised as documents, and malicious path-manipulation exploits designed to overwrite sensitive system directories outside the target extraction path. Additionally, standard archive tools dump invisible Mac metadata files (.DS_Store, __MACOSX) into folders shared with Windows and Linux users.
2. Target Audience: Software developers, DevOps engineers, system administrators, security-conscious power users, and AI workflow operators who demand strict filesystem controls and native command-line or MCP automation on macOS.
3. Use Cases: Safely inspecting untrusted third-party packages or software dependencies downloaded from the web; building encrypted 7z backups with hidden filenames; stripping Mac-only junk metadata prior to distributing code repositories or client deliverables; and automating file extraction tasks directly from local AI assistant clients via MCP tools.

Unique Advantages

1. Strengths & Limitations (Pros & Cons):
   • Pros: Exceptional focus on security with pre-extraction inspection, zero background data uploading of archive contents, native Apple Silicon performance, inclusion of both a CLI and an AI MCP server, and a lifetime personal free tier with low-cost commercial licensing.
   • Cons: Strictly limited to macOS 26 or later running on Apple Silicon hardware (Intel Macs and older macOS versions are unsupported); AES-256 encrypted ZIPs created by CozyZip require compatible software (like 7-Zip or CozyZip) and may fail to open via default native utility handlers on older Windows or Mac systems.
2. Key Alternatives & Differentiation:
   • The Unarchiver: A popular free macOS extraction tool, but it lacks archive creation capabilities, safety inspection previews, encryption support, a Terminal CLI, and an MCP server.
   • Keka: A robust open-source file archiver for Mac that handles creation and extraction well, but it lacks CozyZip's advanced security warning system, path traversal blockades, and native AI Model Context Protocol integration.
   • Apple's Native Archive Utility: Built into macOS, but offers zero visibility into archive contents prior to extraction, provides no security analysis, and clutters shared archives with .DS_Store files.

Frequently Asked Questions (FAQ)

1. Is CozyZip free to use? CozyZip offers a free lifetime personal licence for non-business use upon providing a verified email address, covering up to three Macs with all features and updates included. Commercial use by a business or organization requires a one-time fee of US$5 per person for up to three Macs.
2. Does CozyZip upload my files or archives to the cloud? No. All archive processing, previewing, creation, and extraction happen entirely locally on your Mac. Online network requests are used strictly for license activation, key verification, and software update checks. When utilizing the local MCP server, your chosen AI client's independent data privacy policies apply.
3. Can CozyZip open password-protected or encrypted archives? Yes, CozyZip identifies and opens password-protected archives. If an archive uses encrypted filenames (such as in encrypted 7z formats), a password must be entered before the file listing can be populated and previewed.
4. Why are TAR.GZ archives unable to use password protection? The underlying specification for TAR and GZIP formats does not natively support standard encryption or password protection. To secure files with a password and keep filenames hidden, CozyZip recommends utilizing the 7z format with AES-256 encryption.