
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@lastbluetape/mcp-server
Advanced tools
MCP server for LastBlueTape — a punch list service for construction and renovation projects. This server lets AI assistants create lists, manage items, track progress, and share lists with your team, all through the LastBlueTape API.
npx @lastbluetape/mcp-server
| Variable | Required | Description |
|---|---|---|
LASTBLUETAPE_API_KEY | Yes | Your API key (lbt_xxx) |
LASTBLUETAPE_PAYMENT_METHOD | No | Stripe payment method ID (pm_xxx) for auto-upgrading lists |
LASTBLUETAPE_BASE_URL | No | API base URL (default: https://lastbluetape.com) |
Add to your claude_desktop_config.json:
{
"mcpServers": {
"lastbluetape": {
"command": "npx",
"args": ["-y", "@lastbluetape/mcp-server"],
"env": {
"LASTBLUETAPE_API_KEY": "lbt_your_api_key_here"
}
}
}
}
Add to your Claude Code MCP settings:
{
"mcpServers": {
"lastbluetape": {
"command": "npx",
"args": ["-y", "@lastbluetape/mcp-server"],
"env": {
"LASTBLUETAPE_API_KEY": "lbt_your_api_key_here"
}
}
}
}
| Tool | Description |
|---|---|
create_list | Create a new punch list |
list_my_lists | List all punch lists linked to your API key |
get_list | Get details and stats for a list |
list_items | List all items in a list |
add_item | Add a new item to a list |
update_item | Update an item's title or description |
set_item_status | Set item status (open, in_progress, done) |
flag_item | Flag or unflag an item for attention |
get_activity | Get the activity log for a list |
upgrade_list | Upgrade a list to Pro ($4.99 one-time) |
Full API docs at lastbluetape.com/docs
FAQs
MCP server for LastBlueTape punch list management
We found that @lastbluetape/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.