
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
@open-qr/mcp
Advanced tools
MCP server for OpenQR (https://openqr.uk): generate QR codes and create, edit and track dynamic (editable) QR codes with scan analytics. Bridges stdio MCP clients to the hosted endpoint.
MCP server for OpenQR: generate QR codes and create, edit and track dynamic (editable) QR codes with scan analytics.
A thin stdio-to-HTTP bridge: it forwards MCP traffic between your client and the
hosted endpoint at https://openqr.uk/mcp. No tools are implemented here, so the
tool list always matches what the hosted server exposes — run tools/list from
your client to see the current set.
{
"mcpServers": {
"openqr": {
"command": "npx",
"args": ["-y", "@open-qr/mcp"],
"env": { "OPENQR_API_KEY": "oqr_..." }
}
}
}
Prefer the hosted endpoint directly? Most remote-capable clients (Claude Web,
Claude Desktop, Cursor, Cline) can connect to https://openqr.uk/mcp over
streamable HTTP with a Bearer Authorization header, no bridge needed.
| Variable | Required | Purpose |
|---|---|---|
OPENQR_API_KEY | yes | Bearer key from openqr.uk/api |
OPENQR_MCP_URL | no | Override the endpoint (default https://openqr.uk/mcp) |
With a real key in the environment:
npm install
OPENQR_API_KEY=oqr_... node verify.mjs
That runs the full round-trip a client would: initialize, list tools, list prompts and resources, generate a QR, and make an authenticated dynamic-code call.
AGPL-3.0-only, same as the repository.
FAQs
MCP server for OpenQR (https://openqr.uk): generate QR codes and create, edit and track dynamic (editable) QR codes with scan analytics. Bridges stdio MCP clients to the hosted endpoint.
The npm package @open-qr/mcp receives a total of 18 weekly downloads. As such, @open-qr/mcp popularity was classified as not popular.
We found that @open-qr/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.