
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@codmir/mcp
Advanced tools
Codmir MCP Server - AI task execution, tickets, and agent workflows for Windsurf, Cursor, and Claude Desktop
AI-powered task execution, ticket management, and agent workflows for Windsurf, Cursor, Claude Desktop, and the Codmir CLI.
# 1. Authenticate
codmir login
# 2. Add to your editor config (see below)
# 3. Ask your AI: "list my to-do items"
Add to .windsurf/mcp.json:
{
"mcpServers": {
"codmir": {
"command": "npx",
"args": ["@codmir/mcp"]
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"codmir": {
"command": "npx",
"args": ["@codmir/mcp"]
}
}
}
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"codmir": {
"command": "npx",
"args": ["@codmir/mcp"]
}
}
}
Install the Codmir extension. The To-Do List sidebar connects to the same API automatically.
# Interactive login (recommended)
codmir login
# Or set environment variables
export CODMIR_API_TOKEN="your-token"
export CODMIR_USER_ID="your-user-id"
export CODMIR_API_URL="https://codmir.com" # optional
Credentials are stored in ~/.codmir/credentials.json.
| Tool | Description |
|---|---|
list_todo | List actionable to-do tickets (open, in_progress, review) |
update_todo_status | Mark a ticket as done, in-progress, or reopen |
execute_task | Run an AI-powered code task |
get_sprint_tasks | Get tasks for current/specified sprint |
create_ticket | Create a new ticket |
list_project_tasks | List all project tasks |
check_task_status | Check running task status |
get_project_context | Get project overview and tech stack |
store_conversation | Save conversation as documentation |
lookup_error | Look up a production error by any reference |
list_recent_errors | List recent production errors |
get_error_context | Enriched error context for AI debugging |
get_sdk_reference | SDK API reference for a topic |
generate_sdk_code | Generate ready-to-use SDK code |
create_organization | Create a new workspace |
create_project | Create a project within an organization |
get_workspace_status | Check workspace setup status |
You: What's on my to-do list?
AI: [Uses list_todo] → Shows actionable tickets sorted by priority
You: Mark TKT-42 as done
AI: [Uses update_todo_status] → Updated ticket status to done
You: Fix the authentication bug in src/auth/login.ts
AI: [Uses execute_task] → Queues task for AI agent → Returns execution ID
You: Create a ticket for the performance issue we just discussed
AI: [Uses create_ticket] → Creates ticket with context → Returns ticket ID
You: What's happening with error err_abc123?
AI: [Uses lookup_error + get_error_context]
→ Shows stack trace, breadcrumbs, and suggested files to investigate
# List to-do items
codmir mcp todo
codmir mcp todo --priority high
codmir mcp todo --status in_progress
# Update ticket status
codmir mcp done TKT-42
codmir mcp start TKT-42
# List available tools
codmir mcp tools
# Call any tool directly
codmir mcp call create_ticket '{"projectId":"proj_123","title":"Fix crash"}'
# Start the MCP stdio server
codmir mcp serve
import { MCPClient } from '@codmir/sdk/mcp';
const mcp = new MCPClient({
apiUrl: 'https://codmir.com',
token: process.env.CODMIR_API_TOKEN!,
userId: process.env.CODMIR_USER_ID!,
});
// List to-do items
const todos = await mcp.listTodo({ projectId: 'proj_123' });
// Mark as done
await mcp.updateTodoStatus({
projectId: 'proj_123',
ticketId: 'TKT-42',
status: 'done',
});
// Execute an AI task
await mcp.executeTask({
projectId: 'proj_123',
instructions: 'Add rate limiting to /api/auth',
});
// Call any tool
await mcp.callTool('get_project_context', { projectId: 'proj_123' });
codmir login
# Or check: cat ~/.codmir/credentials.json
Restart your editor after updating the config. Test manually:
npx @codmir/mcp
# or
codmir mcp serve
DEBUG=codmir:mcp npx @codmir/mcp
MIT
FAQs
Codmir MCP Server - AI task execution, tickets, sprint planning, error debugging, and desktop control for Claude, Windsurf, Cursor, and VS Code
The npm package @codmir/mcp receives a total of 75 weekly downloads. As such, @codmir/mcp popularity was classified as not popular.
We found that @codmir/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.