
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@logsloom/mcp
Advanced tools
MCP server so coding agents can ingest and search LogsLoom logs.
Registry name: io.github.efim23/logsloom (mcpName + server.json).
It is an HTTP client of the public API (POST/GET /v1/logs), not a database process. Auth is a project API key — no OAuth in this MVP.
npx -y @logsloom/mcp
stdio requires LOGSLOOM_API_KEY. The API origin defaults to https://api.logsloom.com.
Remote (no local process): https://mcp.logsloom.com/mcp with Authorization: Bearer <key>. The hosted server has no default key.
| Tool | API | Notes |
|---|---|---|
logs_ingest | POST /v1/logs | One event (level + message) or a batch in events (max 100) |
logs_search | GET /v1/logs | q, level, service, limit, offset |
logs_get | GET /v1/logs/:id then list | No get-by-id route on the API yet. Tries that path, then matches id on the latest list page. Prefer logs_search for older events. |
logs_projects_list | GET /v1/logs?limit=1 | No user-session projects API. Returns the single-project scope implied by the API key. |
Depends on ingest + list being available (merged on main). Persistence and listing are implemented in @logsloom/api.
| Variable | Required | Default |
|---|---|---|
LOGSLOOM_API_KEY | yes (stdio) | — |
LOGSLOOM_API_URL | no | https://api.logsloom.com |
LOGSLOOM_BASE_URL | no | alias for LOGSLOOM_API_URL (same as the JS SDK) |
MCP_TRANSPORT | no | stdio |
PORT / MCP_PORT | HTTP only | 8788 |
MCP_HOST | HTTP only | 0.0.0.0 |
Local API: LOGSLOOM_API_URL=http://localhost:8080. Create a key with pnpm db:seed.
Streamable HTTP also accepts Authorization: Bearer <key> per request (overrides the env key). Hosted mcp.logsloom.com relies on this and does not set LOGSLOOM_API_KEY on the process.
node dist/index.js --http listens on /mcp (stateless). GET /health is for probes.pnpm --filter @logsloom/mcp build
pnpm --filter @logsloom/mcp start:stdio # Cursor
pnpm --filter @logsloom/mcp start # HTTP :8788
pnpm --filter @logsloom/mcp dev # tsx watch --http
mcp.json){
"mcpServers": {
"logsloom": {
"command": "npx",
"args": ["-y", "@logsloom/mcp"],
"env": {
"LOGSLOOM_API_KEY": "lb_live_…"
}
}
}
}
Optional LOGSLOOM_API_URL (local API or a non-default origin):
{
"mcpServers": {
"logsloom": {
"command": "npx",
"args": ["-y", "@logsloom/mcp"],
"env": {
"LOGSLOOM_API_KEY": "lb_live_…",
"LOGSLOOM_API_URL": "http://localhost:8080"
}
}
}
}
From a built checkout you can also use the package bin after pnpm --filter @logsloom/mcp build:
{
"mcpServers": {
"logsloom": {
"command": "pnpm",
"args": ["--filter", "@logsloom/mcp", "start:stdio"],
"cwd": "/absolute/path/to/logsloom",
"env": {
"LOGSLOOM_API_KEY": "lb_live_…",
"LOGSLOOM_API_URL": "https://api.logsloom.com"
}
}
}
}
Remote HTTP (https://mcp.logsloom.com/mcp):
{
"mcpServers": {
"logsloom": {
"url": "https://mcp.logsloom.com/mcp",
"headers": {
"Authorization": "Bearer lb_live_…"
}
}
}
}
claude_desktop_config.json:
{
"mcpServers": {
"logsloom": {
"command": "npx",
"args": ["-y", "@logsloom/mcp"],
"env": {
"LOGSLOOM_API_KEY": "lb_live_…",
"LOGSLOOM_API_URL": "https://api.logsloom.com"
}
}
}
}
Restart Claude Desktop after editing.
Production image speaks Streamable HTTP on :8788. Spec: .do/app-mcp.yaml. Hosting notes: docs/mcp.md.
docker build -f apps/mcp/Dockerfile -t logsloom-mcp .
docker run --rm -p 8788:8788 \
-e MCP_TRANSPORT=http \
-e LOGSLOOM_API_URL=https://api.logsloom.com \
logsloom-mcp
Do not pass LOGSLOOM_API_KEY on the hosted process. Clients send Bearer on /mcp. For a single-tenant local container you may still set the env key.
The package is public (publishConfig.access: public). CI publishes with npm
Trusted Publishing (OIDC) — no NPM_TOKEN. Workflow:
.github/workflows/publish-mcp.yml.
Setup steps (Trusted Publisher field values, next tag mcp-v0.1.1, then
mcp-publisher): docs/mcp.md.
pnpm --filter @logsloom/mcp test
# API must be running + seeded:
LOGSLOOM_API_KEY=lb_live_… pnpm --filter @logsloom/mcp smoke
FAQs
LogsLoom MCP server — ingest and search logs from coding agents
The npm package @logsloom/mcp receives a total of 37 weekly downloads. As such, @logsloom/mcp popularity was classified as not popular.
We found that @logsloom/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.