
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@morph-llm/morph-fast-apply
Advanced tools
MCP server with Morph AI-powered file editing using fast apply model and abbreviated edit snippets (obfuscated)
Node.js server implementing Model Context Protocol (MCP) for filesystem operations with AI-powered file editing using Morph's fast apply model.
edit_file tool using Morph's fast apply model for intelligent code mergingSet MORPH_API_KEY environment variable to enable AI-powered editing features.
ALL_TOOLS - Control Tool AvailabilityThis server supports two modes via the ALL_TOOLS environment variable:
ALL_TOOLS="false" (Recommended) - Fast file editing only
edit_file tool for lightning-fast code editsALL_TOOLS="true" - Full filesystem access
read_file, write_file, list_directory, search_files, etc.# Fast editing mode (recommended)
export ALL_TOOLS="false"
export MORPH_API_KEY="sk-your-morph-api-key-here"
# Full filesystem mode
export ALL_TOOLS="true"
export MORPH_API_KEY="sk-your-morph-api-key-here"
MCP clients can dynamically update allowed directories via Roots.
This server uses Morph's fast apply model API for intelligent code merging at 4500+ tokens/second with 99.2% accuracy. The edit_file tool processes code edits by taking initial code and edit snippets, then merging them intelligently using special "// ... existing code ..." comments for unchanged sections.
MORPH_API_KEY environment variable in your MCP configurationsk- or morph-This package includes obfuscated code for production deployment while maintaining the same functionality and API compatibility.
Add to your Claude Desktop configuration file (claude_desktop_config.json):
{
"mcpServers": {
"morph-fast-apply": {
"command": "npx",
"args": ["-y", "@morph-llm/morph-fast-apply"],
"env": {
"MORPH_API_KEY": "sk-your-morph-api-key-here",
"ALL_TOOLS": "false"
}
}
}
}
{
"mcpServers": {
"morph-fast-apply": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"--mount", "type=bind,src=/Users/username/Desktop,dst=/projects/Desktop",
"morph-llm/morph-fast-apply", "/projects"
],
"env": {
"MORPH_API_KEY": "sk-your-morph-api-key-here",
"ALL_TOOLS": "false"
}
}
}
}
claude mcp add filesystem-with-morph -e MORPH_API_KEY=sk-your-morph-api-key-here -e ALL_TOOLS=false -- npx @morph-llm/morph-fast-apply
💡 Pro tip: Configure Claude to always use Morph for edits by adding this to your project:
mkdir -p .claude echo "IMPORTANT: ALWAYS use mcp_filesystem-with-morph_edit_file tool to make any code edits. Do not use the default edit tool." > .claude/CLAUDE.md
Add to your .claude.json file:
{
"mcpServers": {
"filesystem-with-morph": {
"command": "npx",
"args": [
"@morph-llm/morph-fast-apply"
],
"env": {
"MORPH_API_KEY": "sk-your-morph-api-key-here",
"ALL_TOOLS": "false"
}
}
}
}
For direct command-line usage or custom integrations:
# Set environment variables
export MORPH_API_KEY="sk-your-morph-api-key-here"
export ALL_TOOLS="false" # or "true" for full filesystem access
# Run the MCP server
npx @morph-llm/morph-fast-apply
For quick installation, click the installation buttons below...
For manual installation, add the following JSON block to your User Settings (JSON) file in VS Code. You can do this by pressing Ctrl + Shift + P and typing Preferences: Open Settings (JSON).
Optionally, you can add it to a file called .vscode/mcp.json in your workspace. This will allow you to share the configuration with others.
Note that the
mcpkey is not needed in the.vscode/mcp.jsonfile.
You can provide sandboxed directories to the server by mounting them to /projects. Adding the ro flag will make the directory readonly by the server.
Note: all directories must be mounted to /projects by default. Remember to set your MORPH_API_KEY for AI-powered editing.
{
"mcp": {
"servers": {
"morph-fast-apply": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"--mount", "type=bind,src=${workspaceFolder},dst=/projects/workspace",
"morph-llm/morph-fast-apply",
"/projects"
],
"env": {
"MORPH_API_KEY": "sk-your-morph-api-key-here",
"ALL_TOOLS": "false"
}
}
}
}
}
{
"mcp": {
"servers": {
"morph-fast-apply": {
"command": "npx",
"args": [
"-y",
"@morph-llm/morph-fast-apply",
"${workspaceFolder}"
],
"env": {
"MORPH_API_KEY": "sk-your-morph-api-key-here",
"ALL_TOOLS": "false"
}
}
}
}
}
FAQs
MCP server with Morph AI-powered file editing using fast apply model and abbreviated edit snippets (obfuscated)
The npm package @morph-llm/morph-fast-apply receives a total of 1,269 weekly downloads. As such, @morph-llm/morph-fast-apply popularity was classified as popular.
We found that @morph-llm/morph-fast-apply demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.