
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@bugmojo/mcp-server
Advanced tools
BugMojo MCP server — connects AI coding agents (Claude Code, Cursor, VS Code, Claude Desktop) to BugMojo bug tracking
MCP server that connects AI coding agents — Claude Code, Cursor, VS Code, Claude Desktop — to BugMojo bug tracking.
BugMojo captures pixel-perfect bug reports straight from the browser — session replay, console logs, network requests, screenshots. This MCP server hands that context to your AI coding agent: it can list, search, and read bugs, file new ones, update status/priority/assignee, and add comments over BugMojo's API-key-authenticated REST API. Your agent fixes bugs with the full capture context instead of a one-line description.
Want the full surface? Regression suites/runs, testing workflow, agents, session-replay summaries, and inline console/network logs are available on the hosted, OAuth-authenticated HTTP endpoint at
https://www.bugmojo.com/api/mcp— see Full surface (OAuth HTTP) below. This npm package intentionally stays a minimal bugs shim so every tool maps to a real endpoint (nothing 404s).
Requires Node.js 18+. No install needed — MCP clients run it with npx:
npx -y @bugmojo/mcp-server
Or install the bugmojo-mcp command globally:
npm install -g @bugmojo/mcp-server
# or
pnpm add -g @bugmojo/mcp-server
# or
yarn global add @bugmojo/mcp-server
It speaks MCP over stdio and reads two environment variables (below).
bm_key_).claude mcp add bugmojo -e BUGMOJO_API_KEY=bm_key_your_key_here -- npx -y @bugmojo/mcp-server
| Variable | Required | Description |
|---|---|---|
BUGMOJO_API_KEY | ✅ | Your BugMojo API key (starts with bm_key_). Generate one in the dashboard under Settings → API Keys. |
BUGMOJO_API_URL | — | Base URL of your BugMojo instance. Defaults to https://www.bugmojo.com — only set this for self-hosted or local instances (e.g. http://localhost:3000). |
Either use the CLI (per-user):
claude mcp add bugmojo -e BUGMOJO_API_KEY=bm_key_your_key_here -- npx -y @bugmojo/mcp-server
Or check a project-scoped .mcp.json into your repo root so the whole team gets it:
{
"mcpServers": {
"bugmojo": {
"command": "npx",
"args": ["-y", "@bugmojo/mcp-server"],
"env": {
"BUGMOJO_API_KEY": "bm_key_your_key_here"
}
}
}
}
Add to claude_desktop_config.json (Settings → Developer → Edit Config):
{
"mcpServers": {
"bugmojo": {
"command": "npx",
"args": ["-y", "@bugmojo/mcp-server"],
"env": {
"BUGMOJO_API_KEY": "bm_key_your_key_here"
}
}
}
}
~/.cursor/mcp.json (global) or .cursor/mcp.json (per project):
{
"mcpServers": {
"bugmojo": {
"command": "npx",
"args": ["-y", "@bugmojo/mcp-server"],
"env": {
"BUGMOJO_API_KEY": "bm_key_your_key_here"
}
}
}
}
.vscode/mcp.json:
{
"servers": {
"bugmojo": {
"command": "npx",
"args": ["-y", "@bugmojo/mcp-server"],
"env": {
"BUGMOJO_API_KEY": "bm_key_your_key_here"
}
}
}
}
Point it at the same stdio command: npx -y @bugmojo/mcp-server (or bugmojo-mcp if installed globally) with BUGMOJO_API_KEY in the environment. Add BUGMOJO_API_URL only if you self-host.
| Tool | What it does |
|---|---|
list_bugs | List/filter bugs by project, status, priority, assignee (paginated). |
get_bug | Full details of one bug: description, comments, labels, recordings/screenshots. |
search_bugs | Full-text search across bug titles and descriptions. |
create_bug | Create a bug in a project (title, description, priority, assignee). Needs a write-scoped key. |
update_bug | Update status, priority, assignee, title, or description. Needs a write-scoped key. |
add_comment | Add a comment to a bug. Needs a write-scoped key. |
That's the whole npm package — six tools, each mapping to a real /api/v1/bugs/* endpoint.
Regression suites/runs, the testing (QA) workflow, agents, session-replay summaries (summarize_replay), and inline console/network logs (get_bug_console_logs, get_bug_network_logs) are served by the hosted, OAuth 2.1-authenticated streaming endpoint — not this npm package. Point an HTTP-capable MCP client at:
https://www.bugmojo.com/api/mcp
The client opens a browser login the first time (no API key to manage). Optional query params: ?workspace=<slug> binds the connection to a workspace, and ?mode=admin additionally exposes the admin-management tools.
// Claude Code / clients that support remote MCP servers
{
"mcpServers": {
"bugmojo": {
"type": "http",
"url": "https://www.bugmojo.com/api/mcp"
}
}
}
Once configured, ask your agent things like:
"List the open CRITICAL bugs in project X, open the newest one, and summarise the repro steps."
The agent calls list_bugs (status=OPEN, priority=CRITICAL), then get_bug for the full context — including the session replay BugMojo captured in the browser.
This package is a thin, stateless client: it translates MCP tool calls into authenticated HTTPS requests to the BugMojo REST API (/api/v1). All business logic and data live in your BugMojo instance — nothing is stored locally.
"BUGMOJO_API_KEY environment variable is required"
The key isn't reaching the server process. Put it in the env block of your MCP config (or pass -e BUGMOJO_API_KEY=... to claude mcp add) — shell exports are not inherited by every MCP client.
"BUGMOJO_API_KEY must start with 'bm_key_' prefix"
You copied the wrong value (e.g. a session token or a truncated key). Regenerate the key in the dashboard under Settings → API Keys and copy the whole bm_key_... string.
"Authentication failed ... Check your BUGMOJO_API_KEY" (401)
The key was revoked or belongs to a different instance. Generate a fresh key; if you self-host, also confirm BUGMOJO_API_URL points at that instance.
"Permission denied" (403) on create/update/comment
Your key is read-only. create_bug, update_bug, and add_comment need a write-scoped key.
"fetch failed" / ECONNREFUSED
The server can't reach BUGMOJO_API_URL. The default is https://www.bugmojo.com; if you set a self-hosted/local URL, make sure that instance is running and reachable.
Server disconnects immediately on first run
Make sure your config uses "args": ["-y", "@bugmojo/mcp-server"] — without -y, npx's first-run "Ok to proceed?" prompt hangs the stdio handshake. Also confirm node --version is 18 or newer.
| Package | Use it for |
|---|---|
@bugmojo/widget | Framework-agnostic on-site feedback + capture widget core |
@bugmojo/react | React / Next.js SDK — provider, error boundary, hooks |
@bugmojo/react-native | React Native + Expo SDK — shake-to-report |
@bugmojo/cli | Pull a bug's Playwright repro pack, verify fixes locally |
MIT © Softech Infra
FAQs
BugMojo MCP server — connects AI coding agents (Claude Code, Cursor, VS Code, Claude Desktop) to BugMojo bug tracking
The npm package @bugmojo/mcp-server receives a total of 0 weekly downloads. As such, @bugmojo/mcp-server popularity was classified as not popular.
We found that @bugmojo/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.