
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@octocrawl/mcp
Advanced tools
Octocrawl as an MCP server over stdio, a client of a running Octocrawl API (octocrawl serve).
Octocrawl as an MCP server over stdio, for Claude Desktop, Claude Code, Cursor, Codex and other MCP clients: scrape, map, crawl and batch tools whose results carry an Evidence Record. It is a client of a running Octocrawl API: start one with npx octocrawl serve, then point the client at it.
{ "mcpServers": { "octocrawl": { "command": "npx", "args": ["-y", "@octocrawl/mcp", "--base-url", "http://127.0.0.1:8787"] } } }
--base-url (or W2L_API_URL, default http://127.0.0.1:8787) names the API; --token (or W2L_API_TOKEN) authenticates to a hosted one.
To try Octocrawl without installing anything, connect the client to hosted Octocrawl instead: https://mcp.octocrawl.dev/mcp (Streamable HTTP), no account and 20 pages a day per address, with scrape and map. Setup for each client: https://octocrawl.dev/docs/connect-mcp/
Licence: AGPL-3.0-only. Website and docs: https://octocrawl.dev. Source: https://github.com/77777R7/Octocrawl
FAQs
Octocrawl as an MCP server over stdio, a client of a running Octocrawl API (octocrawl serve).
The npm package @octocrawl/mcp receives a total of 624 weekly downloads. As such, @octocrawl/mcp popularity was classified as not popular.
We found that @octocrawl/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.