
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@insforge/install
Advanced tools
CLI tool for installing Insforge MCP servers across different AI clients.
# Install for specific clients with required API key and base URL
npx @insforge/install --client claude-code --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
npx @insforge/install --client cursor --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
npx @insforge/install --client windsurf --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
npx @insforge/install --client cline --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
npx @insforge/install --client roocode --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
npx @insforge/install --client codex --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
npx @insforge/install --client trae --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130
# Install dev version for testing (uses @insforge/mcp@dev)
npx @insforge/install --client cursor --env API_KEY=YOUR_API_KEY --env API_BASE_URL=http://localhost:7130 --dev
# With custom base URL (e.g., production server)
npx @insforge/install --client cursor --env API_KEY=YOUR_API_KEY --env API_BASE_URL=https://api.insforge.com
http://localhost:7130~/.claude/claude_mcp_config.json)~/.cursor/mcp.json)~/.codeium/windsurf/mcp_config.json)~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json on macOS)~/Library/Application Support/Code/User/globalStorage/rooveterinaryinc.roocline/settings/mcp_settings.json on macOS)--client <client> Target AI client (required)
--env KEY=VALUE Environment variables (can be used multiple times)
API_KEY is required
API_BASE_URL is optional (default: http://localhost:7130)
--dev Install dev version (@insforge/mcp@dev) instead of latest
# Install Insforge MCP for Claude Code
npx @insforge/install --client claude-code --env API_KEY=your-api-key-here --env API_BASE_URL=http://localhost:7130
# Install for Windsurf with production server
npx @insforge/install --client windsurf --env API_KEY=your-api-key --env API_BASE_URL=https://api.insforge.com
# Install dev version for internal testing
npx @insforge/install --client cursor --env API_KEY=your-api-key --env API_BASE_URL=http://localhost:7130 --dev
The installer will:
npx @insforge/mcp@latest (or @insforge/mcp@dev with --dev flag)After installation, restart your AI client to load the Insforge MCP server.
Production (default): npx @insforge/install --client <client> ...
@insforge/mcp@latest - stable, tested versionDevelopment (--dev flag): npx @insforge/install --client <client> ... --dev
@insforge/mcp@dev - latest features, may be unstableMIT
FAQs
CLI tool for installing Insforge MCP servers across different AI clients
We found that @insforge/install demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.