
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@lastest/mcp-server
Advanced tools
MCP server for Lastest visual regression testing platform — lets AI agents run tests, review diffs, and manage baselines
MCP server for Claude Code, Cursor, Windsurf, Cline, and Claude Desktop. Lets AI agents run visual regression tests, review screenshot diffs, and approve baselines on a Lastest instance through the Model Context Protocol.
npx -y @lastest/mcp-server@latest --url https://your-lastest-instance --api-key YOUR_API_KEY
Generate an API key in the Lastest UI: Settings → Runners & API Access → Create API Key (shown only once). The server speaks MCP over stdio — wire it into any compatible client below.
| Client | Status | Install method |
|---|---|---|
| Claude Code | Verified | claude mcp add (see below) |
| Claude Desktop | Verified | claude_desktop_config.json |
| Cursor | Verified | ~/.cursor/mcp.json |
| Windsurf | Verified | MCP config (generic JSON) |
| Cline | Verified | MCP config (generic JSON) |
Any MCP-compliant client that can launch a stdio server with arguments works.
claude mcp add lastest -- npx -y @lastest/mcp-server@latest \
--url https://your-lastest-instance \
--api-key YOUR_API_KEY
Verify with claude mcp list.
Add to claude_desktop_config.json, ~/.cursor/mcp.json, or your client's MCP config:
{
"mcpServers": {
"lastest": {
"command": "npx",
"args": [
"-y",
"@lastest/mcp-server@latest",
"--url",
"https://your-lastest-instance",
"--api-key",
"YOUR_API_KEY"
]
}
}
}
Restart the client.
playwrightOverrides, diffOverrides, stabilizationOverrides, viewport, setup wiringstorageState() blobs) and reusable setup scriptsforceVideoRecording) and read run resultsThe server registers 50 MCP tools (all prefixed lastest_). Every tool returns a structured { status, summary, actionRequired?, details } payload.
| Category | Tools |
|---|---|
| Health & jobs | lastest_health_check, lastest_list_active_jobs, lastest_get_job_status |
| Repositories | lastest_list_repos, lastest_get_repo, lastest_create_repo, lastest_update_repo |
| Playwright settings (repo-level) | lastest_get_playwright_settings, lastest_update_playwright_settings |
| Functional areas | lastest_list_areas, lastest_create_area, lastest_update_area, lastest_delete_area, lastest_list_tests_by_area |
| Tests | lastest_list_tests, lastest_list_failing_tests, lastest_get_test, lastest_create_test, lastest_update_test, lastest_delete_test, lastest_heal_test |
| Setup scripts | lastest_list_setup_scripts, lastest_get_setup_script, lastest_create_setup_script, lastest_update_setup_script, lastest_delete_setup_script |
| Storage states | lastest_list_storage_states, lastest_create_storage_state, lastest_delete_storage_state |
| Runs & builds | lastest_run_tests, lastest_get_test_run, lastest_list_builds, lastest_get_build_status, lastest_review_build |
| Diffs & baselines | lastest_get_diff, lastest_get_visual_diff, lastest_approve_diff, lastest_reject_diff, lastest_approve_all_diffs, lastest_approve_baseline, lastest_reject_baseline |
| Verify phase | lastest_get_change_map, lastest_verify_build, lastest_approve_layer |
| Sharing | lastest_publish_share, lastest_list_build_shares, lastest_list_test_shares, lastest_revoke_share |
| Coverage & QA | lastest_get_coverage, lastest_qa_summary |
lastest_update_test accepts a full override surface so an agent can shape a test without touching the UI:
setupTestId (use another test as setup, takes precedence) or setupScriptId, plus setupOverrides / teardownOverrides blocks to inject/skip default steps (test | script | storage_state).playwrightOverrides (browser, navigation/action/selector timeouts, error modes, baseUrl, cursor speed), viewportOverride, diffOverrides, stabilizationOverrides.quarantined, executionMode (procedural | agent).Pass null to any override block to clear it. The API validates each referenced id is in the same repo before persisting.
lastest-mcp --url <url> --api-key <key>
Both flags are required. The process communicates with the host client over stdio.
Requirements: Node.js 18+ and a reachable Lastest instance.
The server authenticates against Lastest's REST API (/api/v1/*) with a Bearer token. Manage and revoke keys from Settings → Runners & API Access in the Lastest UI.
| Symptom | Fix |
|---|---|
Failed to connect to Lastest at … | Check the URL is reachable from this machine and that the API key is valid. |
Lastest API error 401 | Token revoked or expired — generate a new one in Settings. |
| Tools don't appear in Claude Code | Run claude mcp list; if missing re-run claude mcp add. Restart the client. |
| Tools don't appear in Cursor / Windsurf / Cline | Confirm the JSON config is valid and the client was fully restarted. |
git clone https://github.com/las-team/lastest
cd lastest/packages/mcp-server
pnpm install
pnpm dev -- --url http://localhost:3000 --api-key <key>
FSL-1.1-ALv2 — see LICENSE.
FAQs
MCP server for Lastest visual regression testing platform — lets AI agents run tests, review diffs, and manage baselines
The npm package @lastest/mcp-server receives a total of 32 weekly downloads. As such, @lastest/mcp-server popularity was classified as not popular.
We found that @lastest/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.