
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@likerts/mcp
Advanced tools
Operate the free, MIT-licensed Likerts survey platform from an MCP client. The server exposes the same typed operations and authorization boundaries as the HTTP API and CLI.
The hosted server is listed in the official MCP registry as io.github.crosstabs/likerts. Configure your workspace ID and scoped service credential in your MCP client. The listing does not make workspace data public.
Install a published version from npm:
npm install --global @likerts/mcp
Alternatively, download the MCP tarball from the community release and run npm install --global /absolute/path/to/the-mcp-package.tgz. Node.js 22 or newer is required.
Configure your MCP client to run likerts-mcp over stdio. Set LIKERTS_API_URL to your API origin and supply a scoped LIKERTS_TOKEN through your environment or secret manager. The local API defaults to http://127.0.0.1:8080. Collection operations use LIKERTS_COLLECTION_TOKEN separately; keep management credentials out of embedded apps and tool arguments.
For a source checkout:
npm ci --prefix tools/mcp
npm run build --prefix tools/mcp
node tools/mcp/dist/main.js
Launch the command from an MCP client; stdout is reserved for protocol messages. Authentication and permission checks remain enforced by your API.
The optional hosted endpoint is https://likerts-mcp.onrender.com/mcp/{workspaceId}. It requires the workspace's scoped service credential. Self-hosters use their own remote host.
FAQs
Typed MCP server for the free Likerts survey collection platform.
We found that @likerts/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.