
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@buger/probe-mcp-agent
Advanced tools
An MCP server for Probe that uses an agentic approach to answer questions about codebases.
This MCP server exposes a single tool called search_code that returns AI-generated responses to questions about a codebase. Behind the scenes, it uses the Vercel AI SDK to run AI calls with access to Probe's code search tools.
# Install globally
npm install -g @buger/probe-mcp-agent
# Or install locally
npm install @buger/probe-mcp-agent
# Clone the repository
git clone https://github.com/buger/probe.git
# Navigate to the directory
cd probe/mcp-agent
# Install dependencies
npm install
# Build the package
npm run build
The server can be configured using environment variables:
# API Keys (required - at least one)
ANTHROPIC_API_KEY=your_anthropic_api_key
OPENAI_API_KEY=your_openai_api_key
GOOGLE_API_KEY=your_google_api_key
# API URLs (optional)
ANTHROPIC_API_URL=https://api.anthropic.com/v1
OPENAI_API_URL=https://api.openai.com/v1
GOOGLE_API_URL=https://generativelanguage.googleapis.com
# Force specific provider (optional)
FORCE_PROVIDER=anthropic|openai|google
# Model Configuration (optional)
MODEL_NAME=claude-3-7-sonnet-latest
# Token Limits (optional)
MAX_TOKENS=4000
MAX_HISTORY_MESSAGES=20
# Allowed Folders (optional, but recommended for security)
ALLOWED_FOLDERS=/path/to/repo1,/path/to/repo2
# Setting ALLOWED_FOLDERS restricts code search to only these directories
# and prevents access to other parts of the filesystem
# Debug Mode (optional)
DEBUG=true
You can create a .env file in the root directory with these variables.
# If installed globally
probe-mcp-agent [options]
# If installed locally
npx probe-mcp-agent [options]
# Or start with npm
npm start
# Command line options:
# --provider <name> Force a specific AI provider (anthropic, openai, google)
# --anthropic Shorthand for --provider anthropic
# --openai Shorthand for --provider openai
# --google Shorthand for --provider google
# --timeout, -t <seconds> Set timeout for search operations (default: 120)
# --help, -h Show help message
# Examples:
probe-mcp-agent --provider anthropic
probe-mcp-agent --provider openai --timeout 180
probe-mcp-agent --google -t 60
The server exposes a single tool called search_code with the following parameters:
query (required): The question or request about the codebasepath (optional): Path to the directory to search in. If ALLOWED_FOLDERS is set, this path must be within one of the allowed folders for security reasonscontext (optional): Additional context to help the AI understand the requestmax_tokens (optional): Maximum number of tokens to returntimeout (optional): Timeout for the search operation in seconds (overrides server default)Example usage with an MCP client:
const result = await useMcpTool({
serverName: 'probe-mcp-agent',
toolName: 'search_code',
arguments: {
query: "How does the search functionality work in this codebase?",
path: "/path/to/codebase"
}
});
console.log(result);
The agent will use models in the following priority:
--provider flag or FORCE_PROVIDER environment variable is set, it will use the specified providerYou can also specify a custom model name using the MODEL_NAME environment variable, which will override the default model for the selected provider.
Default models:
claude-3-7-sonnet-latestgpt-4o-2024-05-13gemini-1.5-pro-latestThe MCP agent implements folder protection to prevent unauthorized access to files outside of allowed directories:
ALLOWED_FOLDERS environment variable is set, the agent will only allow searches within those directoriesIt's strongly recommended to set ALLOWED_FOLDERS in production environments to limit the scope of code search to specific repositories or directories.
Example:
# Restrict searches to only these two repositories
ALLOWED_FOLDERS=/home/user/projects/repo1,/home/user/projects/repo2
Without this setting, the agent will default to using the current working directory, which may expose more files than intended.
# Run in development mode
npm run dev
mcp-agent/
├── src/ # Source code
│ ├── agent.js # AI agent implementation
│ ├── config.js # Configuration handling
│ └── index.js # MCP server entry point
├── build/ # Built JavaScript files
├── .env.example # Example environment variables
└── package.json # Project metadata and dependencies
MIT
FAQs
MCP server for Probe with agentic capabilities
We found that @buger/probe-mcp-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.