
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@gleanwork/configure-mcp-server
Advanced tools
A command-line utility for configuring popular MCP clients to connect to Glean's MCP servers.
This package configures MCP clients to connect to:
@gleanwork/local-mcp-serverOAuth with Dynamic Client Registration (Recommended): Automatic authentication with no manual token management required. This is the preferred method for remote MCP servers.
Bearer Tokens: For MCP hosts that don't support OAuth, you can use user-scoped Client API tokens with the MCP scope. Contact your Glean administrator to provision these tokens.
Configure your client to connect to a remote MCP server using OAuth:
npx -y @gleanwork/configure-mcp-server remote --url https://your-instance-be.glean.com/mcp/default --client cursor
Supported clients: cursor, claude-desktop, claude-code, vscode, windsurf, goose
For clients that don't support OAuth, you can specify a token:
npx -y @gleanwork/configure-mcp-server remote --url https://your-instance-be.glean.com/mcp/default --client cursor --token your-api-token
For local server installations, specify both token and instance:
npx -y @gleanwork/configure-mcp-server local --client cursor --token your-api-token --instance instance-name
You can also use an environment file:
npx -y @gleanwork/configure-mcp-server local --client cursor --env path/to/.env.glean
The environment file should contain:
GLEAN_INSTANCE=instance-name
GLEAN_API_TOKEN=your-api-token
Note: For backward compatibility, GLEAN_SUBDOMAIN is still supported, but GLEAN_INSTANCE is preferred.
You can initialize project-level tools and prompts for enhanced development experience:
# Initialize Cursor rules
npx -y @gleanwork/configure-mcp-server init --client cursor
# Initialize Claude Code agents
npx -y @gleanwork/configure-mcp-server init --client claude-code
# Create AGENTS.md file
npx -y @gleanwork/configure-mcp-server init --agents
# Preview files without creating them
npx -y @gleanwork/configure-mcp-server init --client cursor --dryRun
This creates client-specific files:
.cursor/rules/glean-mcp.mdc - Usage rules and examples.claude/agents/*.md - AI agents for enhanced developmentBy default, the CLI uses glean_default as the server name in generated templates. If your Glean MCP server is configured with a different name, you can specify it using the --server-name flag:
# Use custom server name with Cursor
npx -y @gleanwork/configure-mcp-server init --client cursor --server-name my_company_glean
# Use custom server name with Claude Code
npx -y @gleanwork/configure-mcp-server init --client claude-code --server-name enterprise_glean
# Combine with other options
npx -y @gleanwork/configure-mcp-server init --client cursor --agents --server-name acme_glean
This ensures that all generated prompts and configurations reference the correct server name for your MCP setup. The server name must match the name you used when configuring your MCP server connection.
Please see CONTRIBUTING.md for development setup and guidelines.
MIT License - see the LICENSE file for details
FAQs
MCP server configurator for Glean
The npm package @gleanwork/configure-mcp-server receives a total of 139 weekly downloads. As such, @gleanwork/configure-mcp-server popularity was classified as not popular.
We found that @gleanwork/configure-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.