
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@mafdet/mcp
Advanced tools
Mafdet AI MCP server — read-only account tools (models, balance, usage, subscription, docs) for Claude Code, Cursor, Codex, OpenCode, and Claude Desktop.
A Model Context Protocol server that brings read-only Mafdet AI account tools into Claude Code, Claude Desktop, Cursor, Codex CLI, OpenCode, and any other MCP client.
It does not run model inference — you keep calling Mafdet AI models through each tool's normal OpenAI-compatible endpoint. This server only exposes read-only account and documentation helpers.
| Tool | Needs a key | What it does |
|---|---|---|
list_models | no | List Mafdet AI models with provider, tier, and per-1M-token pricing |
search_docs | no | Search the Mafdet AI documentation (titles, URLs, summaries) |
get_balance | yes | Your organization's wallet: balance, bonus, frozen, available |
get_usage_summary | yes | Requests, tokens, and charge over the last N days (1–90) |
get_subscription | yes | Current plan, status, period, and Playground credit |
The account tools are read-only — there is no key management, recharge, refund, subscription change, or any write operation.
Set these environment variables (all optional):
MAFDET_API_KEY — a Mafdet AI key with the account:read scope. Only the
account tools need it; list_models and search_docs work without a key.
Create a key with the scope in the Console (API Keys → "Allow the local MCP
server to read this account"). Prefer your client's secret/env configuration
over putting the key on a command line.MAFDET_BASE_URL — defaults to https://backend.mafdet.ai. Only change it for
local/staging testing; it must be an https:// URL.MAFDET_DOCS_URL — defaults to https://docs.mafdet.ai.claude mcp add mafdet --env MAFDET_API_KEY=sk-mafdet-live-... -- npx -y @mafdet/mcp
Add to the client's MCP config (claude_desktop_config.json, Cursor MCP
settings, etc.):
{
"mcpServers": {
"mafdet": {
"command": "npx",
"args": ["-y", "@mafdet/mcp"],
"env": { "MAFDET_API_KEY": "sk-mafdet-live-..." }
}
}
}
~/.codex/config.toml)[mcp_servers.mafdet]
command = "npx"
args = ["-y", "@mafdet/mcp"]
env = { MAFDET_API_KEY = "sk-mafdet-live-..." }
opencode.json){
"mcp": {
"mafdet": {
"type": "local",
"command": ["npx", "-y", "@mafdet/mcp"],
"environment": { "MAFDET_API_KEY": "sk-mafdet-live-..." }
}
}
}
Omit MAFDET_API_KEY to use only the public tools (list_models,
search_docs).
@mafdet/mcp@0) in automated setups to avoid surprise
upgrades.FAQs
Mafdet AI MCP server — read-only account tools (models, balance, usage, subscription, docs) for Claude Code, Cursor, Codex, OpenCode, and Claude Desktop.
The npm package @mafdet/mcp receives a total of 56 weekly downloads. As such, @mafdet/mcp popularity was classified as not popular.
We found that @mafdet/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.