
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@modelcontextprotocol/server-everything
Advanced tools
MCP server that exercises all the features of the MCP protocol
This MCP server attempts to exercise all the features of the MCP protocol. It is not intended to be a useful server, but rather a test server for builders of MCP clients. It implements prompts, tools, resources, sampling, and more to showcase MCP capabilities.
echo
message
(string): Message to echo backadd
a
(number): First numberb
(number): Second numberlongRunningOperation
duration
(number, default: 10): Duration in secondssteps
(number, default: 5): Number of progress stepsprintEnv
sampleLLM
prompt
(string): The prompt to send to the LLMmaxTokens
(number, default: 100): Maximum tokens to generategetTinyImage
annotatedMessage
messageType
(enum: "error" | "success" | "debug"): Type of message to demonstrate different annotation patternsincludeImage
(boolean, default: false): Whether to include an example image{
"priority": 1.0,
"audience": ["user", "assistant"]
}
getResourceReference
resourceId
(number, 1-100): ID of the resource to referencetype: "resource"
startElicitation
color
(string): Favorite colornumber
(number, 1-100): Favorite numberpets
(enum): Favorite petstructuredContent
location
(string): A location or ZIP code, mock data is returned regardless of valuestructuredContent
field conformant to the output schemaThe server provides 100 test resources in two formats:
Even numbered resources:
test://static/resource/{even_number}
Odd numbered resources:
test://static/resource/{odd_number}
Resource features:
simple_prompt
complex_prompt
temperature
(number): Temperature settingstyle
(string): Output style preferenceresource_prompt
resourceId
(number): ID of the resource to embed (1-100)The server sends random-leveled log messages every 15 seconds, e.g.:
{
"method": "notifications/message",
"params": {
"level": "info",
"data": "Info-level message"
}
}
Add to your claude_desktop_config.json
:
{
"mcpServers": {
"everything": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-everything"
]
}
}
}
For quick installation, use of of the one-click install buttons below...
For manual installation, add the following JSON block to your User Settings (JSON) file in VS Code. You can do this by pressing Ctrl + Shift + P
and typing Preferences: Open User Settings (JSON)
.
Optionally, you can add it to a file called .vscode/mcp.json
in your workspace. This will allow you to share the configuration with others.
Note that the
mcp
key is not needed in the.vscode/mcp.json
file.
{
"mcp": {
"servers": {
"everything": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-everything"]
}
}
}
}
cd src/everything
npm install
npm run start:sse
cd src/everything
npm install
npm run start:streamableHttp
npm install -g @modelcontextprotocol/server-everything@latest
npx @modelcontextprotocol/server-everything
npx @modelcontextprotocol/server-everything stdio
npx @modelcontextprotocol/server-everything sse
npx @modelcontextprotocol/server-everything streamableHttp
FAQs
MCP server that exercises all the features of the MCP protocol
The npm package @modelcontextprotocol/server-everything receives a total of 7,013 weekly downloads. As such, @modelcontextprotocol/server-everything popularity was classified as popular.
We found that @modelcontextprotocol/server-everything demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.