
Research
/Security News
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.
@hellocoop/admin-mcp
Advanced tools
Model Context Protocol (MCP) server for creating and managing Hellō applications.
🚧 BETA Status: This MCP server is currently in beta. We're actively seeking feedback and welcome contributions! Please report issues, suggest improvements, or submit pull requests to help us improve the developer experience.
📖 Full Documentation & Installation Guide
Copy one of these configurations into your MCP client settings:
NPM Package (Latest):
{
"hello-admin-stdio": {
"command": "npx",
"args": ["-y", "@hellocoop/admin-mcp@latest"],
"type": "stdio"
}
}
HTTP Transport (Remote):
{
"hello-admin-http": {
"url": "https://admin-mcp.hello.coop/",
"type": "http"
}
}
📖 See Local Development Setup for running from source
This MCP server provides a single powerful tool (hello_manage_app) that lets you create and manage your Hellō applications directly from your AI assistant. Unlike traditional APIs, every operation automatically includes your complete developer context - profile, teams, and applications - making it perfect for AI assistants.
📖 For detailed usage instructions, examples, and troubleshooting, visit: hello.dev/docs/mcp
🎯 Core Tool:
hello_manage_app - The main tool for all application management
create, read, update, create_secret, upload_logo_from_data, upload_logo_from_url🔄 Always In Context: Unlike traditional APIs, every tool response includes your complete developer context:
This means you never lose context between operations - perfect for AI assistants that need to understand your complete development environment.
hello_manage_app Actions:📝 create - Create new applications
{ profile, application, action_result }👁️ read - Read application details
client_id: Returns your complete profile contextclient_id: Returns profile + specific application{ profile, application?, action_result }✏️ update - Update application settings
{ profile, application, action_result }🔑 create_secret - Generate client secrets
{ profile, application, client_secret, action_result }🎨 upload_logo_from_data - Upload logo from base64 data
{ profile, application, upload_result, action_result }🔗 upload_logo_from_url - Upload logo from URL
{ profile, application, upload_result, action_result }Every response includes your complete profile context, making it perfect for AI assistants that need to maintain awareness of your development environment.
HELLO_DOMAIN: Override the default domain (defaults to hello.coop)HELLO_ADMIN: Override the admin server URL (defaults to https://admin.hello.coop)We want your feedback! This MCP server is in beta and we're actively improving it based on real-world usage.
For local development and testing:
# Clone the repository
git clone https://github.com/hellocoop/admin-mcp
cd admin-mcp
# Install dependencies
npm install
The configure your AI client to run the local version
Local Development (Node.js):
{
"hello-admin-local": {
"command": "node",
"args": ["path/to/HelloCoop/admin-mcp/src/stdio.js"],
"type": "stdio"
}
}
Run the comprehensive test suite:
# Run all automated tests
npm test
FAQs
Model Context Protocol (MCP) for Hellō Admin API.
The npm package @hellocoop/admin-mcp receives a total of 24 weekly downloads. As such, @hellocoop/admin-mcp popularity was classified as not popular.
We found that @hellocoop/admin-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.