
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@lastest/mcp-server
Advanced tools
MCP server for Lastest visual regression testing platform — lets AI agents run tests, review diffs, and manage baselines
MCP server for Claude Code, Cursor, Windsurf, Cline, and Claude Desktop. Lets AI agents run visual regression tests, review screenshot diffs, and approve baselines on a Lastest instance through the Model Context Protocol.
npx -y @lastest/mcp-server@latest --url https://your-lastest-instance --api-key YOUR_API_KEY
Generate an API key in the Lastest UI: Settings → Runners & API Access → Create API Key (shown only once). The server speaks MCP over stdio — wire it into any compatible client below.
| Client | Status | Install method |
|---|---|---|
| Claude Code | Verified | claude mcp add (see below) |
| Claude Desktop | Verified | claude_desktop_config.json |
| Cursor | Verified | ~/.cursor/mcp.json |
| Windsurf | Verified | MCP config (generic JSON) |
| Cline | Verified | MCP config (generic JSON) |
Any MCP-compliant client that can launch a stdio server with arguments works.
claude mcp add lastest -- npx -y @lastest/mcp-server@latest \
--url https://your-lastest-instance \
--api-key YOUR_API_KEY
Verify with claude mcp list.
Add to claude_desktop_config.json, ~/.cursor/mcp.json, or your client's MCP config:
{
"mcpServers": {
"lastest": {
"command": "npx",
"args": [
"-y",
"@lastest/mcp-server@latest",
"--url",
"https://your-lastest-instance",
"--api-key",
"YOUR_API_KEY"
]
}
}
}
Restart the client.
The server registers 34 MCP tools (all prefixed lastest_). Every tool returns a structured { status, summary, actionRequired?, details } payload.
| Category | Tools |
|---|---|
| Health & jobs | lastest_health_check, lastest_list_active_jobs, lastest_get_job_status |
| Repositories | lastest_list_repos, lastest_get_repo, lastest_create_repo, lastest_update_repo |
| Functional areas | lastest_list_areas, lastest_create_area, lastest_update_area, lastest_delete_area, lastest_list_tests_by_area |
| Tests | lastest_list_tests, lastest_list_failing_tests, lastest_get_test, lastest_create_test, lastest_update_test, lastest_delete_test, lastest_heal_test |
| Runs & builds | lastest_run_tests, lastest_get_test_run, lastest_list_builds, lastest_get_build_status, lastest_review_build |
| Diffs & baselines | lastest_get_diff, lastest_get_visual_diff, lastest_approve_diff, lastest_reject_diff, lastest_approve_all_diffs, lastest_approve_baseline, lastest_reject_baseline |
| Sharing | lastest_publish_share |
| Coverage & QA | lastest_get_coverage, lastest_qa_summary |
lastest-mcp --url <url> --api-key <key>
Both flags are required. The process communicates with the host client over stdio.
Requirements: Node.js 18+ and a reachable Lastest instance.
The server authenticates against Lastest's REST API (/api/v1/*) with a Bearer token. Manage and revoke keys from Settings → Runners & API Access in the Lastest UI.
| Symptom | Fix |
|---|---|
Failed to connect to Lastest at … | Check the URL is reachable from this machine and that the API key is valid. |
Lastest API error 401 | Token revoked or expired — generate a new one in Settings. |
| Tools don't appear in Claude Code | Run claude mcp list; if missing re-run claude mcp add. Restart the client. |
| Tools don't appear in Cursor / Windsurf / Cline | Confirm the JSON config is valid and the client was fully restarted. |
git clone https://github.com/las-team/lastest
cd lastest/packages/mcp-server
pnpm install
pnpm dev -- --url http://localhost:3000 --api-key <key>
FSL-1.1-ALv2 — see LICENSE.
FAQs
MCP server for Lastest visual regression testing platform — lets AI agents run tests, review diffs, and manage baselines
The npm package @lastest/mcp-server receives a total of 26 weekly downloads. As such, @lastest/mcp-server popularity was classified as not popular.
We found that @lastest/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.