
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@layers/amba-mcp
Advanced tools
MCP server tools for amba — agentic developer onboarding, project provisioning, and SDK introspection over the Model Context Protocol.
Amba is the agent-native backend-as-a-service for mobile and web apps. This package is the Model Context Protocol (MCP) tool registry that lets an AI agent drive the Amba admin API directly.
It exposes ~178 tools across ~17 groups (projects, push, segments, config, content, users, achievements, challenges, economy, leaderboards, platform, social, xp, events, auth, …) and is the same registry that powers the hosted MCP server at mcp.amba.dev.
npm install @layers/amba-mcp@1.0.1
This package is a tool registry, not a transport. You mount it into your own MCP server:
import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
import { registerAllTools, createApiClient } from '@layers/amba-mcp';
const server = new McpServer({ name: 'amba-mcp', version: '1.0.0' });
const apiClient = createApiClient({
baseUrl: 'https://api.amba.dev/v1/admin',
token: process.env.AMBA_DEVELOPER_TOKEN,
});
registerAllTools(server, apiClient);
// Then mount `server` behind any MCP transport (stdio, Streamable HTTP, SSE).
Every tool except the public auth tools (amba_developer_signup, amba_developer_login, amba_developer_refresh) requires a developer Bearer token.
amba_developer_signup with no Authorization header — the response includes a long-lived Personal Access Token (pat) and a freshly provisioned project.pat as the inbound Bearer on every subsequent MCP call.amba_get_provisioning_status until the project flips to status: "active" before issuing client traffic.Omit token on createApiClient to fall back to the CLI credential file at ~/.amba/credentials.json.
Tool reference: https://docs.amba.dev/mcp.
Apache-2.0
FAQs
MCP server tools for amba — agentic developer onboarding, project provisioning, and SDK introspection over the Model Context Protocol.
The npm package @layers/amba-mcp receives a total of 7 weekly downloads. As such, @layers/amba-mcp popularity was classified as not popular.
We found that @layers/amba-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.