
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
@layers/amba-mcp
Advanced tools
MCP server tools for amba — agentic developer onboarding, project provisioning, and SDK introspection over the Model Context Protocol.
Amba is the agent-native backend-as-a-service for mobile and web apps. This package is the Model Context Protocol (MCP) tool registry that lets an AI agent drive the Amba admin API directly.
It exposes ~178 tools across ~17 groups (projects, push, segments, config, content, users, achievements, challenges, economy, leaderboards, platform, social, xp, events, auth, …) and is the same registry that powers the hosted MCP server at mcp.amba.dev.
npm install @layers/amba-mcp@1.0.1
This package is a tool registry, not a transport. You mount it into your own MCP server:
import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
import { registerAllTools, createApiClient } from '@layers/amba-mcp';
const server = new McpServer({ name: 'amba-mcp', version: '1.0.0' });
const apiClient = createApiClient({
baseUrl: 'https://api.amba.dev/v1/admin',
token: process.env.AMBA_DEVELOPER_TOKEN,
});
registerAllTools(server, apiClient);
// Then mount `server` behind any MCP transport (stdio, Streamable HTTP, SSE).
Every tool except the public auth tools (amba_developer_signup, amba_developer_login, amba_developer_refresh) requires a developer Bearer token.
amba_developer_signup with no Authorization header — the response includes a long-lived Personal Access Token (pat) and a freshly provisioned project.pat as the inbound Bearer on every subsequent MCP call.amba_get_provisioning_status until the project flips to status: "active" before issuing client traffic.Omit token on createApiClient to fall back to the CLI credential file at ~/.amba/credentials.json.
Tool reference: https://docs.amba.dev/mcp.
Apache-2.0
FAQs
MCP server tools for amba — agentic developer onboarding, project provisioning, and SDK introspection over the Model Context Protocol.
The npm package @layers/amba-mcp receives a total of 11 weekly downloads. As such, @layers/amba-mcp popularity was classified as not popular.
We found that @layers/amba-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.