
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@codeplaydata/mcp
Advanced tools
The MCP library that encapsulates all the behavioral of the model context protocol typescript sdk.
Uma biblioteca que encapsula todo o comportamento do Model Context Protocol SDK em TypeScript, fornecendo uma interface simplificada e robusta para integração com o protocolo MCP.
Para instalar a biblioteca, execute:
npm install @codeplaydata/mcp
Essa lib é uma wraper da SDK do Typescript para o Model Context Protocol, com ela é possível, criar um servidor com pela Factory adicionando tools, resources e prompts. Também é possível adicionar tools que tenham acesso ao servidor para modificar o seu estado. No geral, não existe necessidade de trabalhar com o protocolo diretamente.
No arquivo main.ts
existe um modo de uso, nela é possível notar que caso utilize express
é possível extender
o tipo da Resquest e Response do Controller.
Por enquanto, a implementação do transporte é a recomendada pela última release o StreamableHttpTransport
.
A autenticação ficar por conta do servidor Http de escolha do usuário.
Por enquanto, o servidor não implementa o COMPLETION.
Scripts disponíveis:
npm run build
- Compila o projeto TypeScriptnpm run dev
- Executa o projeto em modo de desenvolvimentonpm run inspect
- Executa o inspetor MCPnpm run publish
- Publica o pacote no NPMA biblioteca utiliza uma única dependências:
The MCP TypeScript wrapper.
Copyright (C) 2025 Pedro Paulo Teixeira dos Santos
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
FAQs
The MCP library that encapsulates all the behavioral of the model context protocol typescript sdk.
The npm package @codeplaydata/mcp receives a total of 719 weekly downloads. As such, @codeplaydata/mcp popularity was classified as not popular.
We found that @codeplaydata/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.