
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@mindpilot/mcp
Advanced tools
See through your agent's eyes. Visualize legacy code, architect new systems, understand everything.
See through your agent's eyes. Visualize legacy code, inspect complex flows, understand everything.

Node.js v20.0.0 or higher.
claude mcp add mindpilot -- npx @mindpilot/mcp@latest
Under Settings > Cursor Settings > MCP > Click Add new global MCP server and configure mindpilot in the mcpServers object.
{
"mcpServers": {
"mindpilot": {
"command": "npx",
"args": ["@mindpilot/mcp@latest"]
}
}
}
Follow the instructions here for enabling MCPs in VS Code: https://code.visualstudio.com/docs/copilot/chat/mcp-servers
Go to Settings > Features > MCP, then click Edit in settings json
Then add mindpilot to your MCP configuration:
{
"mcp": {
"servers": {
"mindpilot": {
"type": "stdio",
"command": "npx",
"args": ["@mindpilot/mcp@latest"]
}
}
}
}
Under Settings > Windsurf Settings > Manage Plugins, click view raw config and configure mindpilot in the mcpServers object:
{
"mcpServers": {
"mindpilot": {
"command": "npx",
"args": ["@mindpilot/mcp@latest"]
}
}
}
In the AI Thread panel click on the three dots ..., then click Add Custom Server...
In the Command to run MCPserver field enter npx @mindpilot/mcp@latest and click Add Server.
--port command line switch.~/.mindpilot/data/. You can specify a custom location using the --data-path command line switch.Mindpilot intelligently handles multiple AI assistants running simultaneously. When you have multiple Claude Desktop windows or IDE instances open:
This means you can work with multiple MCP hosts at once without port conflicts, and they'll all contribute to the same collection of diagrams.
Mindpilot MCP collects anonymous usage data to help us understand how the product is being used and improve the user experience.
If you prefer not to share anonymous usage data, you can disable analytics by adding the --disable-analytics flag to your MCP configuration:
Claude Code:
claude mcp add mindpilot -- npx @mindpilot/mcp@latest --disable-analytics
Other IDEs:
Add "--disable-analytics" to the args array in your configuration:
{
"command": "npx",
"args": ["@mindpilot/mcp@latest", "--disable-analytics"]
}
After configuring the MCP in your coding agent you can make requests like "create a diagram about x" and it should use the MCP server to render Mermaid diagrams for you in a browser connected to the MCP server.
You can optionally update your agent's rules file to give specific instructions about when to use mindpilot-mcp.
Frontier LLMs are well trained to generate valid Mermaid syntax. The MCP is designed to accept Mermaid syntax and render diagrams in a web app running on http://localhost:4000 (default port).
If you use port 4000 for another service you can configure the MCP to use a different port.
Claude Code example:
claude mcp add mindpilot -- npx @mindpilot/mcp@latest --port 5555
To save diagrams to a custom location (e.g., for syncing with cloud storage):
Claude Code example:
claude mcp add mindpilot -- npx @mindpilot/mcp@latest --data-path /path/to/custom/location
Other IDEs:
{
"command": "npx",
"args": ["@mindpilot/mcp@latest", "--data-path", "/path/to/custom/location"]
}
If you use asdf as a version manager and have trouble getting MCPs to work (not just mindpilot), you may need to set a "global" nodejs version from your home directory.
cd
asdf set nodejs x.x.x
Configure the MCP in your coding agent (using claude in this example)
claude mcp add mindpilot -- npx tsx <path to...>/src/server/server.ts
Run claude with the --debug flag if you need to see MCP errors
Start the development client (Vite) to get hot module reloading while developing.
npm run dev
Open the development client
localhost:5173
FAQs
See through your agent's eyes. Visualize legacy code, architect new systems, understand everything.
We found that @mindpilot/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.