
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@formfeed/mcp
Advanced tools
Model Context Protocol server for Formfeed: list templates, read data schemas, validate and render documents from AI agents.
Model Context Protocol server for Formfeed.
Gives Claude, Cursor and other agents six tools: list_templates, get_template_schema,
validate_template (free: the data against the template's schema, ad-hoc HTML offline), render, convert_to_pdf (Word, Excel,
PowerPoint and OpenDocument to PDF) and get_render.
{
"mcpServers": {
"formfeed": {
"command": "npx",
"args": ["-y", "@formfeed/mcp"],
"env": { "FORMFEED_API_KEY": "ff_test_…" }
}
}
}
A test key renders free with a watermark; a live key consumes units. FORMFEED_REGION=us or
FORMFEED_BASE_URL select another API host.
https://mcp.formfeed.dev/mcp/<workspace id> signs in with your Formfeed account (OAuth; the client
opens the browser), https://mcp.formfeed.dev/mcp takes Authorization: Bearer ff_…. Self-host the
same endpoint with formfeed-mcp --http --port 8790, plus --auth-server <issuer> for OAuth sign-in
against your own Supabase Auth.
Documentation: https://docs.formfeed.dev/integrations/mcp
FAQs
Model Context Protocol server for Formfeed: list templates, read data schemas, validate and render documents from AI agents.
The npm package @formfeed/mcp receives a total of 921 weekly downloads. As such, @formfeed/mcp popularity was classified as not popular.
We found that @formfeed/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.