
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@ask-llm/mcp
Advanced tools
Unified MCP server for multi-LLM consultation — registers tools from all available providers (Gemini, Codex, Claude, Ollama, Antigravity) behind runtime availability checks
A unified MCP server that auto-detects installed LLM providers (Gemini, Codex, Claude, Ollama, Antigravity) and registers only the available tools. One install, all providers. Works with Claude Code, Codex CLI, Cursor, Warp, Copilot, and 40+ other MCP clients.
Part of the Ask LLM monorepo.
claude mcp add ask-llm -- npx -y @ask-llm/mcp
Add to claude_desktop_config.json:
{
"mcpServers": {
"ask-llm": {
"command": "npx",
"args": ["-y", "@ask-llm/mcp"]
}
}
}
ask-gemini toolsask-codex toolsask-ollama toolsOn startup, the unified server:
The orchestrator exposes a single ask-llm tool (not one tool per provider — ADR-029, for token efficiency); you pick the provider per call. When any provider is installed it registers:
| Tool | Purpose |
|---|---|
ask-llm | Route a prompt to a provider via the provider param (gemini, codex, claude, ollama, antigravity); optional sessionId for multi-turn |
multi-llm | Dispatch one prompt to multiple providers in parallel; structured per-provider report |
get-usage-stats | Per-session token totals + per-provider/model breakdowns (in-memory) |
diagnose | Environment diagnostics — provider CLI presence + versions |
ping | Connection test |
Claude is intentionally suppressed when the MCP host is already Claude Code because Claude Code rejects nested Claude sessions. It is auto-detected normally from Codex and other clients.
Full docs at lykhoyda.github.io/ask-llm
MIT
FAQs
Unified MCP server for multi-LLM consultation — registers tools from all available providers (Gemini, Codex, Claude, Ollama, Antigravity) behind runtime availability checks
The npm package @ask-llm/mcp receives a total of 103 weekly downloads. As such, @ask-llm/mcp popularity was classified as not popular.
We found that @ask-llm/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.