
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
@postman/postman-mcp-cli
Advanced tools
A CLI tool to download a ZIP by ID, unzip, and run node mcpServer.js
A CLI tool to download, extract, and run MCP (Model Context Protocol) servers from S3. This tool simplifies the process of running MCP servers by handling the download, extraction, and execution in a single command.
# Clone the repository
git clone <repository-url>
cd mcp-runner-lib
# Install dependencies
npm install
# Link the CLI tool globally (optional)
npm link
# Run an MCP server by ID
node bin/cli.js <server-id>
# Example
node bin/cli.js my-mcp-server-123
# If you ran npm link, you can use the command directly
postman-mcp-runner <server-id>
npm install
node mcpServer.js
with proper stdin/stdout piping for MCP protocol communicationThe tool consists of two main components:
bin/cli.js
): Handles command-line arguments and invokes the runnerlib/runner.js
): Core logic for downloading, extracting, and running MCP serversThe runner is designed to work with the Model Context Protocol, providing:
mcp-runner-lib/
āāā bin/
ā āāā cli.js # CLI entry point
āāā lib/
ā āāā runner.js # Core runner logic
āāā package.json # Project configuration
āāā README.md # This file
adm-zip
: ZIP file extractionaxios
: HTTP requests for downloading files# Install dependencies
npm install
# Run the CLI tool
node bin/cli.js <server-id>
The tool includes comprehensive error handling for:
"Usage: mcp-run " error
Download failures
Extraction errors
Node.js version issues
runner.js
if using a different versionFAQs
A CLI tool to download a ZIP by ID, unzip, and run node mcpServer.js
The npm package @postman/postman-mcp-cli receives a total of 98 weekly downloads. As such, @postman/postman-mcp-cli popularity was classified as not popular.
We found that @postman/postman-mcp-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 415 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.