
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@coolicons/mcp
Advanced tools
MCP server for coolicons: search the set, get SVG source and the right import, without guessing names
An MCP server for coolicons. Lets a coding agent search 1,324 icons in five styles and three corner radii, read an icon's SVG and get the right import, without guessing names.
Claude Code:
claude mcp add coolicons -- npx -y @coolicons/mcp
Any other client that speaks MCP over stdio:
{
"mcpServers": {
"coolicons": {
"command": "npx",
"args": ["-y", "@coolicons/mcp"]
}
}
}
No API key, no network. The whole set ships inside the package.
| Tool | What it does |
|---|---|
describe_set | Counts, styles, radii, categories, packages and naming rules. Worth calling first |
search_icons | Find icons by name or meaning. Separate several searches with commas to resolve many names in one call |
get_icon | SVG source of one icon in any style and corner radius, with size and stroke width |
get_usage | Install command and import code for React, Vue, SVG or the shadcn/ui registry, with the entry for the chosen style and radius |
A name that does not exist is answered with the closest names, so a typo resolves in one turn. Names that clash with JavaScript or browser globals, like map or file, come back with the Icon suffix (MapIcon).
More in the coolicons repository. MIT license.
FAQs
MCP server for coolicons: search the set, get SVG source and the right import, without guessing names
The npm package @coolicons/mcp receives a total of 0 weekly downloads. As such, @coolicons/mcp popularity was classified as not popular.
We found that @coolicons/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.