
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@neitherai/mcp-server
Advanced tools
Stdio MCP server for Cursor and other agent IDEs. Connects to Neither decision memory with cited provenance — not anonymous text chunks.
Free beta — no waitlist required. Create a workspace API key and paste it into your MCP config.
Add this to your Cursor MCP settings (mcp.json):
{
"mcpServers": {
"neither": {
"command": "npx",
"args": ["-y", "@neitherai/mcp-server@latest"],
"env": {
"NEITHER_API_KEY": "sk_ctx_your_workspace_key",
"NEITHER_API_BASE": "https://api.neither.online"
}
}
}
}
NEITHER_API_BASE defaults to https://api.neither.online when omitted.
| Variable | Required | Description |
|---|---|---|
NEITHER_API_KEY | Yes | Workspace key with memory_read (and can_ingest for push) |
NEITHER_API_BASE | No | API host (default: https://api.neither.online) |
memory_search — natural-language search over workspace decision memorymemory_for_file — cited Decision/Rejected/Constraint prose for a repo file pathmemory_snippet_fetch — fetch verbatim snippet by source_idmemory_timeline — time-ordered memory view for a topic or anchormemory_push — close a decision or seed an ADR snippet with provenanceCall Neither at delivery forks and planning writes — when choosing between approaches or aligning strategy — not on every file open or for passive archaeology.
Full tool reference and provenance fields: https://www.neither.online/docs/mcp
Get a free API key: https://www.neither.online/developers/quickstart
FAQs
Neither decision-memory MCP server for Cursor and agent IDEs
The npm package @neitherai/mcp-server receives a total of 18 weekly downloads. As such, @neitherai/mcp-server popularity was classified as not popular.
We found that @neitherai/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.