
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@contextstream/mcp-server
Advanced tools
MCP server exposing ContextStream public API - code context, memory, search, and AI tools for developers
A powerful Model Context Protocol (MCP) server that provides persistent memory, code context, knowledge graphs, and AI tools. Connect your AI assistant to your codebase's semantic search, memory system, and dependency analysis.
Website: contextstream.io | Docs: contextstream.io/docs/mcp
Add ContextStream to your AI tool's MCP configuration:
{
"mcpServers": {
"contextstream": {
"command": "npx",
"args": ["@contextstream/mcp-server"],
"env": {
"CONTEXTSTREAM_API_URL": "https://api.contextstream.io",
"CONTEXTSTREAM_API_KEY": "your_api_key"
}
}
}
}
{
"mcpServers": {
"contextstream": {
"command": "npx",
"args": ["@contextstream/mcp-server"],
"env": {
"CONTEXTSTREAM_API_URL": "https://api.contextstream.io",
"CONTEXTSTREAM_API_KEY": "your_api_key"
}
}
}
}
{
"mcpServers": {
"contextstream": {
"command": "npx",
"args": ["@contextstream/mcp-server"],
"env": {
"CONTEXTSTREAM_API_URL": "https://api.contextstream.io",
"CONTEXTSTREAM_API_KEY": "your_api_key"
}
}
}
}
Get your API key at contextstream.io
| Variable | Required | Description |
|---|---|---|
CONTEXTSTREAM_API_URL | Yes | API base URL (https://api.contextstream.io) |
CONTEXTSTREAM_API_KEY | Yes | Your API key from contextstream.io |
| Tool | Description |
|---|---|
auth_me | Get current user profile |
| Tool | Description |
|---|---|
workspaces_list | List accessible workspaces |
workspaces_get | Get workspace details |
workspaces_create | Create a new workspace |
workspaces_overview | Get workspace summary |
workspaces_analytics | Get usage analytics |
workspaces_content | List workspace content |
| Tool | Description |
|---|---|
projects_list | List projects (by workspace) |
projects_get | Get project details |
projects_create | Create a new project |
projects_overview | Get project summary |
projects_statistics | Get code statistics |
projects_files | List indexed files |
projects_index | Trigger re-indexing |
projects_index_status | Check indexing status |
| Tool | Description |
|---|---|
search_semantic | Semantic vector search |
search_hybrid | Combined semantic + keyword |
search_keyword | Traditional keyword search |
search_pattern | Regex pattern search |
search_suggestions | Get search suggestions |
| Tool | Description |
|---|---|
memory_create_event | Store a memory event |
memory_get_event | Retrieve an event |
memory_update_event | Update an event |
memory_delete_event | Remove an event |
memory_list_events | List events in workspace |
memory_bulk_ingest | Bulk import events |
memory_distill_event | Extract key insights |
memory_create_node | Create knowledge node |
memory_get_node | Get knowledge node |
memory_update_node | Update knowledge node |
memory_delete_node | Remove knowledge node |
memory_supersede_node | Replace with new version |
memory_list_nodes | List knowledge nodes |
memory_search | Search memory |
memory_decisions | Get decision summaries |
memory_timeline | Get chronological timeline |
memory_summary | Get condensed summary |
| Tool | Description |
|---|---|
graph_related | Find related knowledge nodes |
graph_path | Find path between nodes |
graph_decisions | Decision history in graph |
graph_dependencies | Query code dependencies |
graph_call_path | Trace call paths |
graph_impact | Analyze change impact |
graph_circular_dependencies | Find circular deps |
graph_unused_code | Find dead code |
graph_contradictions | Find conflicting info |
| Tool | Description |
|---|---|
ai_context | Build LLM context |
ai_enhanced_context | Deep context with memory |
ai_embeddings | Generate embeddings |
ai_plan | Generate dev plan |
ai_tasks | Generate tasks |
These tools enable automatic context initialization for AI assistants:
| Tool | Description |
|---|---|
session_init | Initialize conversation - First tool to call, returns workspace/project info, recent memory, decisions |
session_get_user_context | Get user preferences and coding style from memory |
session_capture | Store context (decisions, insights, preferences) to memory |
session_smart_search | Search with automatic context enrichment (memory + code + decisions) |
session_remember | Quick natural language memory storage ("Remember I prefer TypeScript strict mode") |
session_recall | Quick natural language recall ("What were the auth decisions?") |
Usage in AI Tools:
# In Cursor/Claude Code/Windsurf - start with:
"Initialize session for this workspace"
# Then use natural commands:
"Remember we decided to use PostgreSQL for the database"
"Recall the authentication decisions we made"
"What are my coding preferences?"
Pre-built prompts for common workflows:
| Prompt | Description |
|---|---|
explore-codebase | Get a codebase overview |
capture-decision | Document an ADR |
review-context | Build code review context |
investigate-bug | Debug investigation helper |
explore-knowledge | Navigate knowledge graph |
onboard-to-project | Generate onboarding guide |
analyze-refactoring | Find refactoring opportunities |
build-context | Build comprehensive LLM context |
| Resource | Description |
|---|---|
contextstream:openapi | OpenAPI specification |
contextstream:workspaces | Workspace listing |
contextstream:projects/{id} | Projects for workspace |
The client includes:
MIT
FAQs
Verified npm launcher for the open-source ContextStream Rust MCP server
The npm package @contextstream/mcp-server receives a total of 905 weekly downloads. As such, @contextstream/mcp-server popularity was classified as not popular.
We found that @contextstream/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.