
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@debugai/mcp
Advanced tools
DebugAI MCP server — hand any error to DebugAI from Claude Desktop, Claude Code, Cursor, Zed, or any MCP client and get root cause + ranked fixes.
DebugAI as an MCP server. Your agent hands an error to debug_error and gets
back the root cause plus up to 3 ranked fixes with code patches. Works in
Claude Desktop, Claude Code, Cursor, Zed, Windsurf, and any other MCP client.
Until now this server only shipped inside the DebugAI VS Code extension. This package is the same server, standalone. No VS Code required.
dbg_...) from debugai.io/dashboard.Instead of repeating the key in each client's env block, write it to
~/.debugai/config.json:
{ "api_key": "dbg_your_key_here" }
Every MCP client launching npx -y @debugai/mcp picks it up — you can then
drop the env block from the snippets below entirely. An explicit
DEBUGAI_API_KEY env var still wins over the file.
claude mcp add debugai --env DEBUGAI_API_KEY=dbg_your_key_here -- npx -y @debugai/mcp
claude_desktop_config.json (Settings, Developer, Edit Config):
{
"mcpServers": {
"debugai": {
"command": "npx",
"args": ["-y", "@debugai/mcp"],
"env": { "DEBUGAI_API_KEY": "dbg_your_key_here" }
}
}
}
~/.cursor/mcp.json (or .cursor/mcp.json per project):
{
"mcpServers": {
"debugai": {
"command": "npx",
"args": ["-y", "@debugai/mcp"],
"env": { "DEBUGAI_API_KEY": "dbg_your_key_here" }
}
}
}
settings.json:
{
"context_servers": {
"debugai": {
"command": {
"path": "npx",
"args": ["-y", "@debugai/mcp"],
"env": { "DEBUGAI_API_KEY": "dbg_your_key_here" }
}
}
}
}
~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"debugai": {
"command": "npx",
"args": ["-y", "@debugai/mcp"],
"env": { "DEBUGAI_API_KEY": "dbg_your_key_here" }
}
}
}
You don't need this package. The DebugAI extension registers the MCP server automatically (VS Code 1.101+) and adds one-click fix apply, proactive scan, and codebase indexing on top.
debug_errorGive it an error, get an analysis.
| Input | Required | Description |
|---|---|---|
errorText | yes | Full error message, exception, or stack trace. |
language | no | javascript, typescript, python, go, rust, or auto (default). |
codeSnippet | no | Code around the failing line, if the agent has it. |
filePath | no | Path to the file that threw. |
Returns the root cause, up to 3 fixes ranked by confidence, the detected
framework, and whether the answer came from cache. Since 2.0 each fix also
carries, where derivable: edits (exact old/new strings your agent's edit
tool can apply directly), unified_diff, and verify_with (a syntax-level
check command to run after applying). Read-only: it never touches your
files. Applying a fix is your agent's (and your) call.
Every fix is labeled with its verification state, and there are three of them, not two: verified (a mechanical check passed — currently parse/import classes), failed check (confidence capped hard), or not verified (the confidence number is the model's own estimate — nothing checked it). We label the third case instead of hiding it.
report_outcomeTell DebugAI whether an applied fix actually worked.
| Input | Required | Description |
|---|---|---|
debugLogId | yes | The debug_log_id from the debug_error response. |
result | yes | worked or failed. |
fixRank | no | Which ranked fix was applied (1-3). |
newError | no | If it failed: the error you saw after applying. |
Confirmed rank-1 fixes are remembered per project (the next hit on the same error starts from the confirmed fix); failed-fix follow-ups are the feedback that improves future answers. Agents are asked to call this once per applied fix — same pipeline human feedback flows through in the VS Code extension.
Example, in Claude Code:
Paste a traceback and ask "why is this failing?". Claude calls
debug_errorand gets back something like:Root cause:
db.sessionis used after the request context closed. Fix 1 (94% confidence): move the query inside the request handler...
| Variable | Default | Description |
|---|---|---|
DEBUGAI_API_KEY | (none) | Your API key. Falls back to api_key in the config file. |
DEBUGAI_API_BASE | DebugAI production | Override for self-hosted or staging setups. Falls back to api_base in the config file. |
DEBUGAI_TIMEOUT_MS | 150000 | Per-request deadline. Deep analyses can take 30-90s. |
DEBUGAI_CONFIG_PATH | ~/.debugai/config.json | Alternate config file location. Rarely needed. |
Model: badge in each response tells you
which one answered.env block in
your client config or ~/.debugai/config.json, restart the client. Keys
start with dbg_.npx @debugai/mcp: correct. It's a stdio server that
waits for an MCP client to speak first. Run npx @debugai/mcp --help to
verify the install.npm install
npm test # builds, then runs unit + spawned-process e2e tests
MIT © DebugAI
FAQs
DebugAI MCP server. One command sets it up in Claude Desktop, Claude Code, Cursor, Zed, Windsurf, Cline or any MCP client: browser sign-in, no key pasting, no config editing.
The npm package @debugai/mcp receives a total of 253 weekly downloads. As such, @debugai/mcp popularity was classified as not popular.
We found that @debugai/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.