Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@livevariant/mcp
Advanced tools
@livevariant/mcp
MCP server for LiveVariant: build, inspect and read bandit-driven A/B tests from Claude, ChatGPT, Copilot or any MCP client
@livevariant/mcp
MCP server for LiveVariant: build, inspect and read adaptive A/B tests from Claude, ChatGPT, Copilot or any MCP client.
npx -y @livevariant/mcp
Set runtime environment variables before starting the MCP server when you point it at a self-hosted deployment:
LIVEVARIANT_SERVER_URL: the deployment origin to call.LIVEVARIANT_API_TOKEN: the deployment'sLV_API_TOKEN, when/mcpor/api/v1/*is gated.LIVEVARIANT_ASSET_UPLOAD_TOKEN: the deployment'sLV_ASSET_UPLOAD_TOKEN, when/assetsis gated.
The hosted endpoint at https://livevariant.com/mcp offers the same tools with nothing installed.
Part of livevariant/livevariant; the repository README covers the whole system. AGPL-3.0.
FAQs
MCP server for LiveVariant: build, inspect and read bandit-driven A/B tests from Claude, ChatGPT, Copilot or any MCP client
We found that @livevariant/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 27 Aug 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026