Nextcloud

Use an app password, never the account password.

1. Sign in to Nextcloud and open Settings → Security → Devices & sessions.
2. Create a new app password named e.g. AnythingMCP. Nextcloud shows it once.
3. Set NEXTCLOUD_URL to your instance root (no trailing slash), NEXTCLOUD_USERNAME to the login name and NEXTCLOUD_APP_PASSWORD to the generated value. An app password can be revoked on its own, and it sidesteps two-factor authentication, which would otherwise break API access entirely.

Three things every OCS call needs, all of which this adapter sends for you:

• Authorization: Basic … from the username and app password,
• the OCS-APIRequest: true header — without it Nextcloud answers with an HTML login page and a 200, which looks like success and parses like nonsense,
• format=json, or the response comes back as XML.

Two OCS versions live side by side. The provisioning API (users, groups) is on ocs/v1.php; the sharing API is on ocs/v2.php. They also report errors differently — v1 puts the real status in the body's meta.statuscode while returning HTTP 200. Read ocs.meta before trusting ocs.data.

Admin-only endpoints. Listing users and groups requires an administrator or a group admin. A normal user's app password gets an OCS 997 (unauthorised) inside an HTTP 200.

Files themselves are WebDAV, not OCS, and are out of scope here: this connector manages users, groups and shares, not file contents.

Self-hosted, which is the thing to plan for.

• On AnythingMCP Cloud the instance must be reachable from the public internet on a real hostname with a valid TLS certificate. A self-signed certificate will fail: the connector offers no trust-anything switch.
• On an internal host (cloud.intern, 10.0.0.x), self-host AnythingMCP on the same network and add that host to SSRF_ALLOWED_HOSTS, or the outbound guard refuses the call before it is made.

Writes: nextcloud_create_share publishes a real share. A public link share (shareType: 3) is reachable by anyone who has the URL — set a password and an expiry date unless you mean it to be open.