
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@eox/elements-mcp-server
Advanced tools
A server to provide information about EOxElements custom elements for coding agents.
This server provides a set of tools for a coding agent to get information about the EOxElements custom elements. It uses the @modelcontextprotocol/sdk to expose the tools.
To use the MCP server without installing anything locally, you can point your coding agent to our hosted endpoint:
https://elements.mcp.eox.at
Alternatively, you can run the server locally.
Install the package globally from npm:
npm install -g @eox/elements-mcp-server
Then, run the server:
eox-elements-mcp-server
The server will fetch the latest custom-elements.json from the EOxElements GitHub repository and start on http://localhost:3000.
If you are working on the EOxElements project itself, you will want to run the server with a local custom-elements.json file.
EOxElements project, install all dependencies:npm install
custom-elements.json file is up-to-date:npm run generate-manifest
--manifest flag, pointing to the generated custom-elements.json file:node mcp-server/index.js --manifest ./custom-elements.json
You can also provide a local path to the story snippets file using the --snippets flag:
node mcp-server/index.js --manifest ./custom-elements.json --snippets ./story-snippets.json
The server will start on http://localhost:3000 and can be consumed by pointing a coding agent to it (or http://localhost:3000/ with a slash at the end if a path is required).
FAQs
A server to provide information about EOxElements custom elements for coding agents.
We found that @eox/elements-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.