
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@dthreads/mcp-server
Advanced tools
MCP server for AiWA — run website audits and read results from any MCP client (Claude Desktop, Cursor, Claude Code) using your AiWA API key.
Run AiWA website audits and read their results from any MCP client — Claude Desktop, Cursor, Claude Code — using your own AiWA API key.
It's a thin wrapper over the AiWA public API (/api/v1/*). Every tool call is
translated into an HTTP request authenticated with your API key; there is no
extra business logic here. Plan gating, rate limits, and key scoping are all
enforced by the AiWA API itself.
| Tool | What it does | AiWA endpoint |
|---|---|---|
run_audit(url, modules?, language?) | Starts an audit. Returns a jobId immediately — the audit runs in the background. | POST /v1/audit |
get_audit_status(jobId) | Status, progress, per-module scores, findings-by-severity summary. | GET /v1/jobs/:id/summary |
get_audit_findings(jobId) | Full result: every finding with severity, location, recommendation. | GET /v1/jobs/:id |
list_projects() | Your projects with the scores of each one's latest completed audit. | GET /v1/projects |
compare_competitors(projectId) | A project's scores next to each tracked competitor, with per-module deltas. | GET /v1/projects/:projectId/competitors |
Because audits take a while (real browser rendering), run_audit never blocks —
it hands back a jobId and you poll get_audit_status until status is
"completed".
cd packages/mcp-server
npm install
npm run build
This produces dist/index.js (the runnable server).
The server reads two environment variables:
AIWA_API_KEY — required, your AiWA API key.AIWA_API_URL — optional, defaults to https://api.aiwa.am/api.Add to claude_desktop_config.json (Settings → Developer → Edit Config):
{
"mcpServers": {
"aiwa": {
"command": "node",
"args": ["/absolute/path/to/packages/mcp-server/dist/index.js"],
"env": {
"AIWA_API_KEY": "aiwa_your_key_here"
}
}
}
}
Add to .cursor/mcp.json in your project (or the global Cursor MCP settings):
{
"mcpServers": {
"aiwa": {
"command": "node",
"args": ["/absolute/path/to/packages/mcp-server/dist/index.js"],
"env": { "AIWA_API_KEY": "aiwa_your_key_here" }
}
}
}
Restart the client, then ask it to "audit https://example.com with AiWA" — it
will call run_audit, then get_audit_status until the audit finishes.
FAQs
MCP server for AiWA — run website audits and read results from any MCP client (Claude Desktop, Cursor, Claude Code) using your AiWA API key.
We found that @dthreads/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.