
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@agentic-codeflow/mcp-server
Advanced tools
MCP server for Agentic CodeFlow AI-assisted development workflows
A Model Context Protocol (MCP) server providing AI-assisted development workflow commands for any MCP-compatible AI client.
🎯 7 Core Workflow Commands
research - Comprehensive codebase and documentation analysisplan - Create detailed implementation plansexecute - Implement plans with systematic verificationtest - Generate comprehensive test suitesdocument - Create user guides and API documentationcommit - Create structured git commitsreview - Validate implementations against requirements🔒 Privacy-Safe
🚀 Easy Integration
# Start MCP server directly with npx
npx @codeflow/mcp-server
# Global installation
npm install -g @agentic-codeflow/mcp-server
# Or use with npx (no installation required)
npx @agentic-codeflow/mcp-server
Add to your Claude Desktop MCP configuration:
{
"mcpServers": {
"codeflow-workflows": {
"command": "npx",
"args": ["@agentic-codeflow/mcp-server"]
}
}
}
Configuration file locations:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%/Claude/claude_desktop_config.json~/.config/Claude/claude_desktop_config.jsonOnce configured, you'll have access to workflow tools in your AI client:
Use tool: research
Input: "Analyze the authentication system in this codebase and identify potential security improvements"
Use tool: plan
Input: "Create a plan to add OAuth2 authentication based on the research findings"
Use tool: execute
Input: "Implement the OAuth2 authentication following the plan step by step"
Use tool: test
Input: "Generate comprehensive tests for the OAuth2 authentication implementation"
Use tool: document
Input: "Create user documentation for the new OAuth2 authentication feature"
Use tool: commit
Input: "Create proper git commits for the OAuth2 authentication implementation"
Use tool: review
Input: "Review the OAuth2 implementation against the original requirements"
Use tool: get_command
Input: { "name": "research" }
researchConducts comprehensive analysis of codebases, documentation, and specific topics. Provides structured findings with actionable insights.
planCreates detailed implementation plans with phases, tasks, dependencies, and success criteria. Includes risk assessment and timeline estimates.
executeSystematically implements plans with incremental testing and documentation. Follows coding standards and best practices.
testGenerates comprehensive test suites including unit, integration, and end-to-end tests. Ensures good coverage and reliability.
documentCreates user guides, API documentation, and technical specifications. Tailored for different audiences with clear examples.
commitCreates well-structured git commits following conventional commit format. Groups related changes logically.
reviewValidates implementations against requirements and quality standards. Provides detailed assessment and recommendations.
This MCP server works seamlessly with the codeflow CLI for enhanced project-specific workflows:
# Set up project with codeflow CLI
npm install -g codeflow-cli
codeflow setup my-project
# Start MCP server (will use project-specific commands)
cd my-project
npx @codeflow/mcp-server
When used with codeflow CLI, the server will:
✅ What we do:
❌ What we don't do:
# Check Node.js version (requires 18+)
node --version
# Test direct execution
npx @codeflow/mcp-server
# Check for port conflicts
lsof -i :3000
npx @codeflow/mcp-serverThis is expected behavior! The MCP server provides generic, privacy-safe command templates. For project-specific customization, use the codeflow CLI.
# Clone and setup
git clone https://github.com/ferg-cod3s/codeflow.git
cd codeflow/packages/agentic-codeflow-mcp
npm install
# Development with hot reload
npm run dev
# Build for production
npm run build
# Test locally
npm start
We welcome contributions! Please see our Contributing Guide for details.
MIT - see LICENSE file for details.
Made with ❤️ for AI-assisted development workflows
FAQs
MCP server for Agentic CodeFlow AI-assisted development workflows
We found that @agentic-codeflow/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.