
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@mindstone/mcp-server-canary
Advanced tools
Mindstone's internal release-pipeline test connector — not for use. Exists only to validate the rebel-oss release pipeline end-to-end. Single ping tool; no external dependencies, no auth, no bridge.
Mindstone's internal release-pipeline test connector — not for use. It exists only to validate the rebel-oss release pipeline end-to-end. Single ping tool; no external dependencies, no auth, no bridge.
No required environment variables — the install completes without prompts.
{
"mcpServers": {
"Canary": {
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-canary"
],
"env": {}
}
}
}
Releasing a real connector for the first time through a brand-new pipeline (Trusted Publishing, GitHub Actions, mcp-publisher, registry sync, host-app catalog) couples two unknowns: the pipeline correctness AND the connector correctness. The canary decouples them — it exercises every step of the pipeline with a tool whose only behaviour is ping → pong v3: <message>.
Once the pipeline has proven itself stable on the canary, real connectors can adopt the same path without piggy-backing on infrastructure debugging.
See docs/plans/260525_oss_release_automation.md (Mindstone-internal) for the full design.
pingEcho a message back wrapped as pong v3: <message>.
| Field | Type | Required | Description |
|---|---|---|---|
message | string | yes | A short message to echo back. 1-200 chars. |
Example:
{
"tool": "ping",
"arguments": { "message": "hello" }
}
Response:
pong v3: hello
npx -y @mindstone/mcp-server-canary
This starts the server on stdio. Most MCP hosts will spawn this for you when you add @mindstone/mcp-server-canary as a stdio MCP server.
Pre-1.0 — this is the canary. Versions are stamped 0.0.x deliberately. Do not depend on this connector for any real workflow; its only purpose is to exercise the release machinery.
FAQs
Mindstone's internal release-pipeline test connector — not for use. Exists only to validate the rebel-oss release pipeline end-to-end. Single ping tool; no external dependencies, no auth, no bridge.
We found that @mindstone/mcp-server-canary demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.