
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
@clize/sites
Advanced tools
Sites by Clize — ship a real marketing site from your coding agent: domain, HTTPS and a working inbox included. Installs the Clize CLI + MCP server.
@clize/sitesBuild and ship a real marketing site from Claude Code: your agent writes the code with 39 design styles, Clize puts it live — domain, HTTPS, and a working inbox included.
A Clize product · clize.ai/sites
Sites generated by coding agents usually die at the preview link. This line is the other half: the part that ends with a domain someone can type.
build site start returns the workflow, a catalog of 39 style constitutions, and a recommendation for your brief — palettes, font pairs, anti-patterns. Your agent still writes the code; it just stops improvising the taste.deploy pushes a directory to a real host with HTTPS on a real domain — a free <slug>.clize.app handle or one you bought a minute earlier.support@ inbox with it, so the contact form on the page has somewhere to land.serve supports Range requests and doesn't poison media caching, so pages with <video> actually play while you iterate.npm i -g @clize/clize
@clize/sites ships no code of its own — it is the Sites entry point on npm and in the MCP registry (ai.clize/sites), and it depends on @clize/clize: one CLI, one MCP server, one account behind every Clize product line. Installing it gets you the whole CLI, not a sites-only fork.
Note that npm does not put a dependency's executable on your PATH when you globally install a metapackage, so install @clize/clize directly for the clize command. Use @clize/sites for the MCP server below.
claude mcp add sites -- npx -y -p @clize/sites clize-mcp --profile sites
--profile sites exposes this line's tools — clize_claim and clize_deploy_site — plus account status / balance / recharge. The design method (build site), local preview (serve) and image generation (gen image) are CLI commands today, so the agent runs them in a shell; when they get MCP tools, they join this profile. Drop --profile for the full Clize tool set.
clize build site start "a landing page for a 3-person audit firm" # method + style recommendation
clize build site get editorial # one style's full constitution
# ... your agent writes the site into ./site ...
clize build site review # anti-slop + design-fidelity checklist
clize serve site # local preview (Range-aware)
clize claim acme # free acme.clize.app + support@ inbox
clize deploy site --domain acme.clize.app
# or: clize domain buy acme.com --confirm && clize deploy site --domain acme.com
Need artwork? clize gen image "..." --confirm writes files next to the site (it quotes the price first, and only spends on --confirm).
ai.clize/sitesMIT © Clize
FAQs
Sites by Clize — ship a real marketing site from your coding agent: domain, HTTPS and a working inbox included. Installs the Clize CLI + MCP server.
The npm package @clize/sites receives a total of 60 weekly downloads. As such, @clize/sites popularity was classified as not popular.
We found that @clize/sites demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.