
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@imagin.studio/api-docs-mcp
Advanced tools
Semantic search over IMAGIN.studio documentation — CDN, API, integration guides, and more.
This is a thin npx wrapper that finds uvx on your system and launches
the Python MCP server. It solves the common problem of GUI apps (Claude
Desktop, Cursor, etc.) not finding uvx in PATH.
curl -LsSf https://astral.sh/uv/install.sh | sh # macOS / Linux
powershell -c "irm https://astral.sh/uv/install.ps1 | iex" # Windows
npx -y @imagin.studio/api-docs-mcp
Or in your agent's MCP config:
{
"imagin-docs": {
"command": "npx",
"args": ["-y", "@imagin.studio/api-docs-mcp"]
}
}
For step-by-step instructions for 7 coding agents (Claude Code, Claude Desktop, Cursor, Windsurf, VS Code + Copilot, Cline, Zed), see the full setup guide on PyPI:
https://pypi.org/project/imagin-studio-api-docs-mcp/
The npx wrapper probes common uvx install locations (~/.local/bin,
Homebrew, cargo) and spawns uvx imagin-studio-api-docs-mcp, which downloads and
runs the Python MCP server. On first run, the server clones the docs and
builds a local vector index (~20-30 seconds).
Apache License 2.0 — see LICENSE.
FAQs
IMAGIN.studio documentation search — MCP server (npx wrapper)
The npm package @imagin.studio/api-docs-mcp receives a total of 187 weekly downloads. As such, @imagin.studio/api-docs-mcp popularity was classified as not popular.
We found that @imagin.studio/api-docs-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.