
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
@featureflip/mcp
Advanced tools
MCP server for managing Featureflip feature flags from AI agents and editors
MCP (Model Context Protocol) server for Featureflip — manage feature flags from AI coding assistants (Claude Code, Cursor, Copilot, Cline) and autonomous agents.
ffp_...): Settings → API Tokens — acts as you, for interactive editor use.ffs_...): Organization Settings → Service Tokens — scoped machine identity for CI/agents.claude mcp add featureflip -e FEATUREFLIP_TOKEN=ffp_your_token -- npx -y @featureflip/mcp
{
"mcpServers": {
"featureflip": {
"command": "npx",
"args": ["-y", "@featureflip/mcp"],
"env": { "FEATUREFLIP_TOKEN": "ffp_your_token" }
}
}
}
| Env var | Required | Default | Purpose |
|---|---|---|---|
FEATUREFLIP_TOKEN | yes | — | ffp_/ffs_ API token |
FEATUREFLIP_API_URL | no | https://api.featureflip.io | API base URL |
FEATUREFLIP_ORG | no | auto | Org slug (needed only for multi-org personal tokens) |
CRUD: list_projects, list_environments, list_flags, get_flag, create_flag, update_flag,
delete_flag, archive_flag, restore_flag, toggle_flag, update_flag_environment_config,
get_targeting, update_targeting, manage_variation, list_segments, get_segment
Workflows: flag_status (cross-environment view), find_stale_flags (cleanup candidates),
wrap_feature (create flag + get the SDK snippet for your language)
Full reference: https://featureflip.io/docs/integrations/mcp/
FAQs
MCP server for managing Featureflip feature flags from AI agents and editors
The npm package @featureflip/mcp receives a total of 227 weekly downloads. As such, @featureflip/mcp popularity was classified as not popular.
We found that @featureflip/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.