
Product
Introducing Repository Access Permissions and Custom Roles
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
@kepler-project/almanac
Advanced tools
MCP server exposing Kepler Almanac tools (customers, communications, briefs, product gaps, Confluence/Jira search) for Claude Code, Cursor, OpenAI Codex CLI, and other stdio MCP clients.
Distribution:
@kepler-project/almanac: pure JavaScript MCP stdio server used directly via npx -y -p @kepler-project/almanac@latest -c almanac.npx -y -p @kepler-project/almanac@latest -c almanac
The npx package runs as a JavaScript MCP server, connects to the hosted Kepler gRPC services, and mints its auth token internally from KEPLER_CLIENT_ID and KEPLER_CLIENT_SECRET.
The npm distribution targets hosted Kepler production services only. There is no local-dev mode in the npx package.
/v1/auth/service-token.KEPLER_CLIENT_ID.| Client | Where to merge |
|---|---|
| Cursor | ~/.cursor/mcp.json (or project .cursor/mcp.json) under mcpServers |
| Claude Code | mcpServers in ~/.claude.json or project config per Anthropic docs |
| Codex CLI | ~/.codex/config.toml – [mcp_servers.kepler-almanac] (see Codex MCP) |
Use the portal Kepler MCP tab to download ready-made fragments.
Example shape (Cursor / Claude Code JSON):
{
"mcpServers": {
"kepler-almanac": {
"command": "npx",
"args": ["-y", "-p", "@kepler-project/almanac@latest", "-c", "almanac"],
"env": {
"KEPLER_CLIENT_ID": "your-client-id",
"KEPLER_CLIENT_SECRET": "your-client-secret"
}
}
}
}
KEPLER_CLIENT_ID=... KEPLER_CLIENT_SECRET=... npx -y -p @kepler-project/almanac@latest -c almanacKEPLER_CLIENT_ID or KEPLER_CLIENT_SECRET should fail fast.tools/list should advertise the Almanac, briefs, Salesforce, Confluence, Jira, and team tool families.local-dev, record IDs use Surreal format (table:id); tool inputs accept id or communication_id where documented.local-dev, schema uses dual-field compatibility for some fields (e.g. type / comm_type, occurred_at / started).local-dev, vector/semantic search uses the graph store’s Surreal backend; ensure HNSW indices and schema are applied per Kepler infra.KEPLER_PORTAL_URL is not used by the npm package. Portal access is only for humans obtaining service credentials and downloading config fragments.FAQs
Kepler Almanac MCP server.
The npm package @kepler-project/almanac receives a total of 51 weekly downloads. As such, @kepler-project/almanac popularity was classified as not popular.
We found that @kepler-project/almanac demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.