
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@gleanwork/mcp-config-schema
Advanced tools
Type-safe configuration schemas and builders for MCP (Model Context Protocol) clients.
MCP servers need to work across many different AI coding assistants—Claude Code, VS Code, Cursor, Claude Desktop, Windsurf, Goose, Codex, and more. Each client has its own:
url vs serverUrl vs uri, command vs cmd, mcpServers vs servers vs extensionsmcp-remote bridgeWithout a unified solution, MCP server authors face a maintenance nightmare: writing and maintaining separate configuration logic for each client, tracking which clients support which features, and keeping up with changes across the ecosystem.
This package provides a single source of truth for MCP client configurations. You describe your connection once, and it generates the correct configuration for any supported client:
import { MCPConfigRegistry } from '@gleanwork/mcp-config-schema';
const registry = new MCPConfigRegistry();
// Same options work for any client
const options = {
transport: 'http',
serverUrl: 'https://api.example.com/mcp/default',
serverName: 'my-server',
headers: { Authorization: 'Bearer token' },
};
// Generate correct config for each client
registry.createBuilder('cursor').buildConfiguration(options); // → JSON with mcpServers
registry.createBuilder('vscode').buildConfiguration(options); // → JSON with servers
registry.createBuilder('goose').buildConfiguration(options); // → YAML with extensions
registry.createBuilder('claude-desktop').buildConfiguration(options); // → JSON with mcp-remote bridge
The package handles all the complexity: format differences, property mapping, platform-specific paths, transport bridging, and one-click installation URLs.
npm install @gleanwork/mcp-config-schema
For stdio transport, provide registry options with your package names, then pass environment variables directly:
import { MCPConfigRegistry } from '@gleanwork/mcp-config-schema';
const registry = new MCPConfigRegistry({
serverPackage: '@your-org/mcp-server', // Your stdio server package
});
const builder = registry.createBuilder('cursor');
// Generate configuration for stdio transport with custom environment variables
const config = builder.buildConfiguration({
transport: 'stdio',
env: {
MY_INSTANCE: 'my-instance',
MY_API_TOKEN: 'my-api-token',
},
});
For connecting to HTTP-based MCP servers, no additional configuration is needed:
import { MCPConfigRegistry } from '@gleanwork/mcp-config-schema';
const registry = new MCPConfigRegistry();
const builder = registry.createBuilder('cursor');
// Generate configuration for HTTP transport
const config = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://your-server.com/mcp/default',
serverName: 'my-server',
});
// Write configuration to the client's config file (Node.js only)
await builder.writeConfiguration({
transport: 'http',
serverUrl: 'https://your-server.com/mcp/default',
serverName: 'my-server',
});
// Generate one-click install URL for supported clients (Cursor, VS Code)
const oneClickUrl = builder.buildOneClickUrl({
transport: 'http',
serverUrl: 'https://your-server.com/mcp/default',
serverName: 'my-server',
});
// Returns: cursor://anysphere.cursor-deeplink/mcp/install?name=my-server&config=...
For HTTP transport with authentication or custom headers:
const config = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://api.example.com/mcp/default',
serverName: 'my-server',
headers: {
Authorization: 'Bearer my-api-token',
'X-Custom-Header': 'custom-value',
},
});
For dynamic URLs with template variables (aligned with MCP registry specification):
const config = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://api.example.com/{region}/mcp/{endpoint}',
urlVariables: {
region: 'us-east-1',
endpoint: 'default',
},
serverName: 'my-server',
});
// Generates config with URL: https://api.example.com/us-east-1/mcp/default
This package serves as the Single Source of Truth for MCP client configurations. It provides:
For detailed configuration examples and requirements for each client, see CLIENTS.md.
import { MCPConfigRegistry } from '@gleanwork/mcp-config-schema';
const registry = new MCPConfigRegistry();
// Get client configuration
const cursorConfig = registry.getConfig('cursor');
console.log(cursorConfig.displayName); // "Cursor"
console.log(cursorConfig.userConfigurable); // true
console.log(cursorConfig.transports); // ['stdio', 'http']
// Query different client groups
const httpClients = registry.getNativeHttpClients();
const bridgeClients = registry.getBridgeRequiredClients();
const macClients = registry.getClientsByPlatform('darwin');
const builder = registry.createBuilder('claude-code');
// HTTP transport (remote server) configuration
const remoteConfig = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://api.example.com/mcp/default',
serverName: 'my-server',
headers: { Authorization: 'Bearer your-token' }, // Optional headers
});
// HTTP transport with URL template variables
const dynamicConfig = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://api.example.com/{region}/mcp/{endpoint}',
urlVariables: { region: 'us-east-1', endpoint: 'default' },
serverName: 'my-server',
});
// stdio transport (local server) configuration
// Note: Requires registry options with serverPackage
const localConfig = builder.buildConfiguration({
transport: 'stdio',
env: {
YOUR_INSTANCE: 'your-instance',
YOUR_API_TOKEN: 'your-api-token',
},
});
// Generate partial configuration (without root object)
const partialConfig = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://api.example.com/mcp/default',
serverName: 'my-server',
includeRootObject: false, // Returns just the server entry without mcpServers wrapper
});
// Returns: { "my-server": { "type": "http", "url": "..." } }
// Instead of: { "mcpServers": { "my-server": { "type": "http", "url": "..." } } }
The includeRootObject option allows you to generate just the server configuration entry without the outer wrapper (mcpServers, servers, or extensions depending on the client). This is useful when you need to merge configurations into an existing setup:
// Generate partial config for merging into existing configuration
const partialConfig = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://api.example.com/mcp/default',
serverName: 'my_server',
includeRootObject: false,
});
// Now you can easily merge it into an existing config
const existingConfig = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
existingConfig.mcpServers = {
...existingConfig.mcpServers,
...partialConfig,
};
fs.writeFileSync(configPath, JSON.stringify(existingConfig, null, 2));
import {
validateConnectionOptions,
safeValidateConnectionOptions,
} from '@gleanwork/mcp-config-schema';
// Validate connection options
const result = safeValidateConnectionOptions({
transport: 'http',
serverUrl: 'https://your-server.com/mcp/default',
});
if (!result.success) {
console.error('Validation errors:', result.error.issues);
}
This package works in browsers! Use the /browser import path:
// Browser-safe import
import { MCPConfigRegistry, ConfigBuilder } from '@gleanwork/mcp-config-schema/browser';
const registry = new MCPConfigRegistry();
const builder = registry.createBuilder('cursor');
// Generate configuration (works in browser)
const config = builder.buildConfiguration({
transport: 'http',
serverUrl: 'https://your-server.com/mcp/default',
});
// Copy to clipboard
navigator.clipboard.writeText(JSON.stringify(config, null, 2));
Note: File operations (writeConfiguration, getConfigPath) are not available in browsers and will throw clear error messages.
import React from 'react';
import { MCPConfigRegistry, ClientId } from '@gleanwork/mcp-config-schema/browser';
function MCPConfigGenerator() {
const registry = new MCPConfigRegistry();
const handleGenerateConfig = (clientId: ClientId, serverUrl: string) => {
const builder = registry.createBuilder(clientId);
const config = builder.buildConfiguration({
transport: 'http',
serverUrl,
serverName: 'my-server',
});
navigator.clipboard.writeText(JSON.stringify(config, null, 2));
};
const clients = registry.getSupportedClients();
return (
<div>
{clients.map((client) => (
<button
key={client.id}
onClick={() => handleGenerateConfig(client.id, 'https://api.example.com/mcp')}
>
Configure {client.displayName}
</button>
))}
</div>
);
}
📖 For complete configuration examples for all clients, see CLIENTS.md
{
"mcpServers": {
"my-server": {
"type": "http",
"url": "https://your-server.com/mcp/default"
}
}
}
These clients require mcp-remote bridge for HTTP servers:
{
"mcpServers": {
"my-server": {
"type": "stdio",
"command": "npx",
"args": ["-y", "mcp-remote", "https://your-server.com/mcp/default"]
}
}
}
extensions:
my-server:
enabled: true
name: my-server
type: streamable_http
uri: https://your-server.com/mcp/default
envs: {}
env_keys: []
headers: {}
description: ''
timeout: 300
bundled: null
available_tools: []
For complete API documentation, see the TypeScript definitions in src/types.ts and src/registry.ts. All exports include JSDoc comments.
Key exports:
MCPConfigRegistry - Main entry point for creating configuration buildersBaseConfigBuilder - Base class for client-specific buildersMCPConnectionOptions - Options for buildConfiguration()RegistryOptions - Options for customizing the registryClientId - Union type of all supported client identifiers# Install dependencies
npm install
# Build the package
npm run build
# Run tests
npm run test
# Run all checks (lint, typecheck, test)
npm run test:all
# Generate documentation
npm run generate:docs
MIT - See LICENSE file for details
This package is part of the Glean MCP ecosystem. For issues and contributions, please visit the repository.
FAQs
Type-safe schemas and builders for MCP client configurations
The npm package @gleanwork/mcp-config-schema receives a total of 17,532 weekly downloads. As such, @gleanwork/mcp-config-schema popularity was classified as popular.
We found that @gleanwork/mcp-config-schema demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.