
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@kubb/mcp
Advanced tools
MCP server for Kubb. Exposes code generation as a tool over the Model Context Protocol so AI assistants like Claude, Cursor, and other MCP-compatible clients can generate TypeScript types, clients, and more.
@kubb/mcp is the MCP server for Kubb. It exposes Kubb code generation as tools over the Model Context Protocol, so AI assistants such as Claude and Cursor can validate a spec and generate TypeScript types and API clients from the chat.
The server has three tools. generate runs a full Kubb build from a kubb.config.ts and returns its build events when the build succeeds. A failed build returns its diagnostics instead. validate checks an OpenAPI spec, and init scaffolds a kubb.config.ts.
Install as a dev dependency:
bun add -D @kubb/mcp
# or
pnpm add -D @kubb/mcp
# or
npm install -D @kubb/mcp
[!IMPORTANT] The
kubb mcpcommand comes from@kubb/cli, which thekubbpackage includes. Installkubbto use it.
Start the server using the Kubb CLI:
npx kubb mcp
Or run it directly as a standalone package:
npx @kubb/mcp
Both commands start the same server over stdio.
Add one of these entries to your MCP client's config, such as claude_desktop_config.json for Claude Desktop.
Using kubb mcp:
{
"mcpServers": {
"kubb": {
"command": "npx",
"args": ["kubb", "mcp"]
}
}
}
Using the standalone package:
{
"mcpServers": {
"kubb": {
"command": "npx",
"args": ["@kubb/mcp"]
}
}
}
The server looks for kubb.config.* in the directory the client starts it in, and rejects a config path outside that directory. Claude Code starts it in the folder you run claude from, so register it from the project root:
claude mcp add kubb -- npx kubb mcp
Clients such as Claude Code ignore a cwd key in this config. When a client starts the server in another directory, change into the project first (macOS and Linux):
{
"mcpServers": {
"kubb-petstore": {
"command": "sh",
"args": ["-c", "cd '/path/to/your/project' && npx kubb mcp"]
}
}
}
generateRuns a Kubb build from your config. A successful build returns the build events, and a failed build returns its diagnostics.
Parameters:
config (string, optional): Path to a config file inside the working directory. Defaults to kubb.config.ts (or .mts, .cts, .js, .mjs, .cjs) in the working directoryinput (string, optional): Path to OpenAPI/Swagger spec file (overrides config file setting)output (string, optional): Output directory path (overrides config file setting)logLevel (enum, optional): One of 'silent', 'info', 'verbose' (default: 'info'), passed to a config that exports a functionExamples:
Using default config file:
{
"config": "./kubb.config.ts"
}
Overriding input and output:
{
"config": "./kubb.config.ts",
"input": "./specs/petstore.yaml",
"output": "./src/generated"
}
With verbose logging:
{
"config": "./kubb.config.ts",
"logLevel": "verbose"
}
validateValidates an OpenAPI/Swagger specification from a path or URL.
Parameters:
input (string, required): Path or URL to the OpenAPI/Swagger specificationinitWrites a kubb.config.ts in the working directory without prompts. It does not install packages, and it fails when kubb.config.ts already exists.
Parameters:
input (string, optional): Path to the OpenAPI spec (default: ./openapi.yaml)output (string, optional): Output directory (default: ./src/gen)plugins (string, optional): Comma-separated list of plugins, such as plugin-ts,plugin-zodThe generate tool looks for kubb.config.ts in the working directory by default. Pass config to use another config file in that directory.
Example kubb.config.ts:
import { defineConfig } from 'kubb'
import { adapterOas } from '@kubb/adapter-oas'
import { pluginTs } from '@kubb/plugin-ts'
import { pluginAxios } from '@kubb/plugin-axios'
export default defineConfig({
input: './petstore.yaml',
output: {
path: './src/generated',
},
adapter: adapterOas(),
plugins: [pluginTs(), pluginAxios()],
})
Kubb is an open source project, and its development is funded entirely by sponsors. If you would like to become a sponsor, please consider:
FAQs
MCP server for Kubb. Exposes code generation as a tool over the Model Context Protocol so AI assistants like Claude, Cursor, and other MCP-compatible clients can generate TypeScript types, clients, and more.
The npm package @kubb/mcp receives a total of 20,533 weekly downloads. As such, @kubb/mcp popularity was classified as popular.
We found that @kubb/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.