
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@meridiantoolkit/mcp
Advanced tools
MCP server for the Meridian business-services platform — expose services, requests, workflow, payments and meetings as MCP tools. Works with Claude Code, Codex CLI, Claude Desktop, pi, and any MCP-compatible client.
MCP server for the Meridian business-services platform. Exposes services, service requests, workflow steps, payments and meetings as Model Context Protocol tools and resources. MCP is a protocol, not a host-specific plugin format — this server runs unchanged in Claude Code, Codex CLI, Claude Desktop, pi, or any other MCP-compatible client.
cd meridian-mcp
npm install
npm run build
Or once published:
npx @meridiantoolkit/mcp
Copy .env.example or set env vars directly:
| Var | Description | Default |
|---|---|---|
MERIDIAN_API_URL | Meridian app base URL | http://localhost:3000 |
MERIDIAN_API_KEY | mrd_ API key (Better Auth) for REST calls | (none — tools return placeholder hint until set) |
DATABASE_URL | Optional direct DB access fallback | |
MERIDIAN_MCP_LOG_LEVEL | debug/info/warn/error | info |
More: /.well-known/agent-configuration exposes Agent Auth discovery (capability-based, short-lived JWTs, device-auth/CIBA approval). Agents can use either a long-lived mrd_ key or scoped Agent Auth grants — see meridian-skills meridian-api skill.
Without MERIDIAN_API_KEY every tool still responds — it explains what endpoint would be called and what to configure, so the server is safe to run in dry-run / demo mode.
npm start # stdio MCP server
npm run dev # watch mode via tsx
claude mcp add meridian -- node /absolute/path/to/meridian-mcp/dist/index.js
# or, once published:
claude mcp add meridian -- npx -y @meridiantoolkit/mcp
Or drop a .mcp.json in your project root (shareable with a team, checked into git):
{
"mcpServers": {
"meridian": {
"command": "npx",
"args": ["-y", "@meridiantoolkit/mcp"],
"env": {
"MERIDIAN_API_URL": "http://localhost:3000",
"MERIDIAN_API_KEY": "..."
}
}
}
}
Codex reads MCP servers from ~/.codex/config.toml (or a project-scoped .codex/config.toml for a trusted project):
[mcp_servers.meridian]
command = "npx"
args = ["-y", "@meridiantoolkit/mcp"]
env = { MERIDIAN_API_URL = "http://localhost:3000", MERIDIAN_API_KEY = "..." }
Or via the CLI: codex mcp add meridian -- npx -y @meridiantoolkit/mcp. The same config is shared by Codex CLI, the IDE extension, and the ChatGPT desktop app.
Codex has no plugin/skill system (unlike Claude Code and pi) — its equivalent of meridian-plugin/meridian-skills is just this MCP server plus project guidance. Copy AGENTS.md.example into your project's AGENTS.md for the same tool-usage guidance the skills packages give elsewhere.
Add to your MCP config (Claude Desktop: claude_desktop_config.json; pi: .pi/settings.json → mcpServers, or pi --mcp):
{
"mcpServers": {
"meridian": {
"command": "node",
"args": ["/absolute/path/to/meridian-mcp/dist/index.js"],
"env": {
"MERIDIAN_API_URL": "http://localhost:3000",
"MERIDIAN_API_KEY": "..."
}
}
}
}
pi --mcp meridian-mcp/dist/index.js
# or via npx after publish
npx @meridiantoolkit/mcp
| Tool | Description |
|---|---|
meridian_status | Check API connectivity/config and list available tools/resources. No params. Works the same in every client — this replaces the pi-only meridian_status extension tool from meridian-plugin so status-checking isn't tied to one host. |
list_services | List services (filter: categorySlug, isActive, countryCode) |
get_service | Get service by id/slug with formConfig |
list_categories | List service categories |
list_service_requests | List requests (filter: status, customerId, providerId, limit) |
get_service_request | Get request by id with steps |
create_service_request | Create request (serviceId, answers, customTitle) |
update_request_status | Patch request status (prefer advance_step) |
get_workflow_status | Current phase + all requestSteps |
advance_step | Complete current step → next step |
list_request_steps | All RequestSteps in order |
get_payment_status | Payment row for a request |
verify_payment | Server-side verify with Flouci (Tunisia, local) or Stripe (international) |
list_meetings | List meetings (filter: serviceRequestId, status) |
create_meeting | Create Teams meeting + invites |
respond_to_meeting | RSVP ACCEPTED/DECLINED/PENDING |
| URI | Description |
|---|---|
meridian://services | Service catalog JSON |
meridian://workflow | Workflow backbone + phases |
npm run typecheck
npm run build
npm test # spawns the built server over stdio and exercises every tool/resource
npm login # once per machine
npm publish --access public # required for the first publish of a scoped package
FAQs
MCP server for the Meridian business-services platform — expose services, requests, workflow, payments and meetings as MCP tools. Works with Claude Code, Codex CLI, Claude Desktop, pi, and any MCP-compatible client.
The npm package @meridiantoolkit/mcp receives a total of 28 weekly downloads. As such, @meridiantoolkit/mcp popularity was classified as not popular.
We found that @meridiantoolkit/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.