
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@gitwand/mcp
Advanced tools
GitWand MCP server — smart Git conflict resolution for AI agents (Claude, Cursor, Windsurf, Claude Code)
MCP server that lets AI agents resolve Git merge conflicts automatically.
GitWand exposes its conflict resolution engine as a Model Context Protocol server. Plug it into Claude Desktop, Claude Code, Cursor, Windsurf, or any MCP-compatible client and the agent can inspect, preview, and resolve conflicts in your repos without you opening a single conflict marker.
No install step — run it via npx:
npx -y @gitwand/mcp --cwd /path/to/your/repo
Or add it to your MCP client config (examples below).
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"gitwand": {
"command": "npx",
"args": ["-y", "@gitwand/mcp"]
}
}
}
The server defaults to the current working directory. To pin it to a specific repo, add "--cwd", "/absolute/path/to/repo" to the args array.
claude mcp add gitwand -- npx -y @gitwand/mcp
Same config shape as Claude Desktop — drop it into the mcpServers block of your client's config file.
Five tools are exposed:
| Tool | What it does |
|---|---|
gitwand_status | List conflicted files with counts and auto-resolvability score |
gitwand_preview_merge | Dry-run: return stats and a risk assessment without writing |
gitwand_resolve_conflicts | Auto-resolve trivial conflicts, return resolutions + pending hunks |
gitwand_explain_hunk | Full decision trace for one hunk (ours / theirs / base / reasoning) |
gitwand_apply_resolution | Apply an agent-provided resolution to a specific complex hunk |
Plus three resources (gitwand://repo/conflicts, gitwand://repo/policy, gitwand://hunk/{file}/{line}) for ambient context.
GitWand handles the trivial conflicts (whitespace, same-change, non-overlapping inserts, value updates, generated files…). The agent handles the complex ones.
gitwand_preview_merge → sees risk level + how many conflicts GitWand can handle alone.gitwand_resolve_conflicts → GitWand resolves the easy hunks and returns pendingHunks for the rest.gitwand_apply_resolution with its chosen content — the file is written.GitWand only auto-resolves when it's certain. The engine tags each hunk with a pattern and a composite confidence score (0–100):
same_change — identical edit on both sides (certain)one_side_change — only one branch touched the block (certain)non_overlapping — additions in different locations (high)whitespace_only — same logic, different indentation (high)reorder_only — pure permutation (high)insertion_at_boundary — pure insertions, base intact (high)value_only_change — scalar updated on one side (medium)generated_file — path matches a known generated-file pattern (high)complex — overlapping edits — never auto-resolvedFormat-aware resolvers (JSON, Markdown, YAML, Vue SFC, lockfiles) kick in before pure text matching.
Drop a .gitwandrc at the repo root to tune policies:
{
"policy": "prefer-merge",
"patternOverrides": {
"*.lock": "prefer-theirs",
"CHANGELOG.md": "prefer-ours"
},
"generatedFiles": ["src/generated/**", "**/*.pb.ts"]
}
Policies: prefer-ours, prefer-theirs, prefer-safety, prefer-merge, strict.
FAQs
GitWand MCP server — smart Git conflict resolution for AI agents (Claude, Cursor, Windsurf, Claude Code)
The npm package @gitwand/mcp receives a total of 787 weekly downloads. As such, @gitwand/mcp popularity was classified as not popular.
We found that @gitwand/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.