
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@mcp-installer/cli
Advanced tools
The command-line tool for installing and managing MCP servers across AI clients.
npm install -g @mcp-installer/cli
See the main README for complete usage documentation.
# Install dependencies
npm install
# Build the CLI
npm run build
# Test locally (without global install)
npm run start -- install playwright --dry-run
# Run in development mode with auto-rebuild
npm run dev
# Run all tests
npm test
# Run tests in watch mode
npm run test:watch
# Run with coverage
npm test -- --coverage
# Build TypeScript
npm run build
# Clean build artifacts
npm run clean
# Type check only
npm run typecheck
src/
├── commands/ # CLI command implementations
│ ├── install.ts # Install command
│ ├── uninstall.ts # Uninstall command
│ ├── list.ts # List command
│ ├── doctor.ts # Diagnostics command
│ ├── backup.ts # Backup command
│ └── restore.ts # Restore command
├── core/ # Core functionality
│ ├── client-manager.ts # AI client detection
│ ├── config-engine.ts # Configuration management
│ └── server-registry.ts # Server registry management
├── types/ # TypeScript type definitions
└── index.ts # CLI entry point
The CLI is built with the following core components:
The CLI implements comprehensive error handling:
FAQs
CLI tool for installing MCP servers across AI clients
We found that @mcp-installer/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.