
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@gitleaderboard/mcp-server
Advanced tools
MCP server for Git Leaderboard — query GitHub contribution rankings, user stats, achievements, and streaks from your AI assistant.
Official MCP server for Git Leaderboard.
Use it from Claude, Cursor, VS Code, Windsurf, and other MCP-compatible clients to query public GitHub leaderboard data directly from your AI assistant.
| Tool | Description |
|---|---|
get_leaderboard | Returns global rankings by contributions, commits, issues, PRs, reviews, or impact score. Supports year and month filters. |
get_user_profile | Returns a user's full Git Leaderboard profile, including stats, achievements, streaks, league career, and rank. |
search_users | Searches Git Leaderboard users by GitHub username. |
compare_users | Compares two GitHub users side by side across rankings, achievements, and streaks. |
Run the server through npx:
npx -y @gitleaderboard/mcp-server
The package exposes the CLI entrypoint mcp-git-leaderboard, but in most MCP clients npx -y @gitleaderboard/mcp-server is the simplest setup.
Add this to claude_desktop_config.json:
{
"mcpServers": {
"git-leaderboard": {
"command": "npx",
"args": ["-y", "@gitleaderboard/mcp-server"]
}
}
}
claude mcp add git-leaderboard -- npx -y @gitleaderboard/mcp-server
Add this to .vscode/settings.json:
{
"mcp": {
"servers": {
"git-leaderboard": {
"command": "npx",
"args": ["-y", "@gitleaderboard/mcp-server"]
}
}
}
}
Add this to your MCP settings:
{
"mcpServers": {
"git-leaderboard": {
"command": "npx",
"args": ["-y", "@gitleaderboard/mcp-server"]
}
}
}
Add this to your MCP settings:
{
"mcpServers": {
"git-leaderboard": {
"command": "npx",
"args": ["-y", "@gitleaderboard/mcp-server"]
}
}
}
By default, the server queries the production Git Leaderboard backend.
Optional environment variables:
CONVEX_URL: Override the default backend URLThis server uses Git Leaderboard's public backend to expose read-only MCP tools. No API key is required for normal usage.
MIT
FAQs
Official MCP server for Git Leaderboard rankings, profiles, streaks, and user comparisons.
We found that @gitleaderboard/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.