
Product
Socket for ClickUp Is Now Available
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.
@nimblebrain/mpak
Advanced tools
CLI for downloading MCPB bundles and Agent Skills from the mpak registry.
npm install -g @nimblebrain/mpak
Search across both bundles and skills:
mpak search <query>
mpak search <query> --type bundle
mpak search <query> --type skill
# Search bundles
mpak bundle search <query>
# Show bundle details
mpak bundle show @scope/name
# Download a bundle
mpak bundle pull @scope/name
mpak bundle pull @scope/name@1.0.0
# Run an MCP server from the registry
mpak run @scope/name
mpak bundle run @scope/name --update
mpak bundle run --local ./path/to/bundle.mcpb
# Validate a skill directory
mpak skill validate ./path/to/skill
# Pack a skill into a .skill bundle
mpak skill pack ./path/to/skill
# Search skills in the registry
mpak skill search <query>
# Show skill details
mpak skill show @scope/name
# Download a .skill bundle
mpak skill pull @scope/name
# Install a skill to ~/.claude/skills/
mpak skill install @scope/name
# List installed skills
mpak skill list
# Set config values for a package
mpak config set @scope/name api_key=xxx
# View stored config (values are masked)
mpak config get @scope/name
# List packages with config
mpak config list
# Clear config
mpak config clear @scope/name
mpak config clear @scope/name api_key
# Build
pnpm build
# Run tests
pnpm test
# Type checking
pnpm typecheck
# Lint
pnpm lint
Apache-2.0
FAQs
CLI for downloading MCPB bundles from the mpak registry
We found that @nimblebrain/mpak demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.

Product
Create and manage Asana tasks directly from Socket alerts, with manual task creation, automated ticketing rules, and two-way sync.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.