
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@agentneeds/need
Advanced tools
Tool discovery for AI agents.
AI agents hallucinate package names. need gives them a verified index of 10,000+ CLI tools — and a closed feedback loop that gets smarter with every install.
You ask Claude to "compress these PNGs". Claude doesn't have pngquant installed and doesn't know what the best tool is. But need is running as an MCP server in the background, so Claude automatically:
brew install pngquant)pngquant higherYou never interact with need directly. You just see the result.
search → install → use → report
↑ |
└────── rankings ────────┘
npm install -g @agentneeds/need
That's it. MCP servers are automatically configured for Claude Code, Cursor, and Claude Desktop on install. Your AI agent can immediately discover and install CLI tools without you doing anything.
Or run with npx: npx @agentneeds/need "compress png images"
Under the hood, need exposes three MCP tools that agents call autonomously:
search_tools — semantic search across 10,000+ CLI toolsinstall_tool — install the best match (security allowlist: brew, apt, npm, pip, cargo only)report_tool_usage — report success or failure, improving rankings for every future agentNo API keys. No accounts. No configuration.
MCP is configured automatically on install. To manually reconfigure:
need setup
To add project-level config files for GitHub Copilot and Windsurf:
need init
need also works as a standalone CLI — semantic search that understands intent, not just keywords.
need convert pdf to png
need find duplicate files
need compress video without losing quality
Queries are embedded and matched against a pgvector database of CLI tools. Results are ranked by semantic similarity combined with community success/failure signals from report_tool_usage.
MIT
FAQs
Discover the right CLI tool for any task using plain English
We found that @agentneeds/need demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.