
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@alpacacloud/mcp
Advanced tools
MCP server for Alpaca Cloud — lets Claude, Cursor, Windsurf and other AI tools connect directly to your Alpaca Cloud project database, auth, and storage.
MCP (Model Context Protocol) server for Alpaca Cloud — lets AI agents like Claude, Cursor, and Windsurf connect directly to your project database, auth, and storage.
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"alpaca-cloud": {
"command": "npx",
"args": [
"@alpacacloud/mcp",
"--url=https://YOUR-PROJECT.alpaca-cloud.com",
"--key=YOUR-SERVICE-ROLE-KEY"
]
}
}
}
Add to your .cursor/mcp.json or .windsurf/mcp.json:
{
"mcpServers": {
"alpaca-cloud": {
"command": "npx",
"args": ["@alpacacloud/mcp", "--url=https://YOUR-PROJECT.alpaca-cloud.com", "--key=YOUR-SERVICE-ROLE-KEY"]
}
}
}
export ALPACA_URL=https://your-project.alpaca-cloud.com
export ALPACA_KEY=your-service-role-key
npx @alpacacloud/mcp
| Tool | Description |
|---|---|
run_sql | Execute any SQL (SELECT, INSERT, DDL, etc.) |
list_tables | List all tables with columns |
get_table | Full schema for a specific table |
query_table | Query with filters, ordering, limits |
insert_row | Insert one or many rows |
update_rows | Update rows matching a filter |
delete_rows | Delete rows matching a filter |
list_auth_users | List all auth users |
get_project_info | Get endpoints and API keys |
list_storage_buckets | List storage buckets |
list_storage_objects | List files in a bucket |
Ask Claude or Cursor things like:
FAQs
MCP server for Alpaca Cloud — AI agents connect to your project (Postgres, Auth, Storage), plus account-wide Sandboxes (code execution) and Workflows (automation).
The npm package @alpacacloud/mcp receives a total of 15 weekly downloads. As such, @alpacacloud/mcp popularity was classified as not popular.
We found that @alpacacloud/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.