
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@gemmein/mcp
Advanced tools
Gemmein MCP server — gives coding agents the Gemmein guide, API reference, rule/error explainers, and a live integration check (reaffirm) as tools. Read-only: it never creates, edits, or deletes anything.
The Gemmein MCP server — gives your coding agent the whole Gemmein contract as tools, straight in the editor.
Gemmein is the backend for web and mobile apps: sign-in, protected data, payments, AI tools and a dashboard to run your customers. This server is read-only: it never creates, edits, or deletes anything on the platform.
Claude Code:
claude mcp add gemmein -- npx -y @gemmein/mcp
Cursor / any MCP client (mcpServers config):
{ "gemmein": { "command": "npx", "args": ["-y", "@gemmein/mcp"] } }
guide — call first: it opens with two doors — an idea with nothing
built yet, or an app that already exists — and both reach the same fit
assessment (FITS / FITS EXCEPT / DOESN'T FIT — the verdict an agent
delivers before any install), then the full builder's guide (auth flow, the seven collection
safety rules, record shapes, links, uploads, contention patterns, payments,
credits, AI tools, relays, mobile).reference — the exact SDK API reference: every method, signature,
return shape, error code.search_docs — targeted search over both documents.explain_rule — any safety rule's contract, what it's right for, and
the mistakes to avoid (or a cheat-sheet of all seven).explain_error — what a GemmeinError code means and exactly what to do.explain_relay — how a relay is written: its trigger, the ten action
verbs (write_record, grant_access, revoke_access, grant_credits,
email_person, call_url, fulfil_product, refund_product, grant_plan,
revoke_plan), templates, and the refusals the engine answers.validate_collection_name — catch a bad collection name at planning
time (a bad name throws synchronously and can blank an app silently).reaffirm_template — the ready-to-edit CI harness that proves an app's
boundaries on every deploy.check_integration — run those boundary checks live against your own
app right now: anonymous access refused where it must be, cross-user
isolation proven with throwaway dev test sessions, structured pass/fail
back. Never pass a live secret key — sk_live is refused by design.Your app talks to Gemmein through @gemmein/sdk.
This server teaches your agent to use it correctly.
MIT © Gemmein Limited
FAQs
Gemmein MCP server — gives coding agents the Gemmein guide, API reference, rule/error explainers, and a live integration check (reaffirm) as tools. Read-only: it never creates, edits, or deletes anything.
The npm package @gemmein/mcp receives a total of 164 weekly downloads. As such, @gemmein/mcp popularity was classified as not popular.
We found that @gemmein/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.