
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
@postman/postman-mcp-cli
Advanced tools
A CLI tool to download, extract, and run MCP (Model Context Protocol) servers from S3. This tool simplifies the process of running MCP servers by handling the download, extraction, and execution in a single command.
# Clone the repository
git clone <repository-url>
cd mcp-runner-lib
# Install dependencies
npm install
# Link the CLI tool globally (optional)
npm link
# Run an MCP server by ID
node bin/cli.js <server-id>
# Example
node bin/cli.js my-mcp-server-123
# If you ran npm link, you can use the command directly
postman-mcp-runner <server-id>
npm installnode mcpServer.js with proper stdin/stdout piping for MCP protocol communicationThe tool consists of two main components:
bin/cli.js): Handles command-line arguments and invokes the runnerlib/runner.js): Core logic for downloading, extracting, and running MCP serversThe runner is designed to work with the Model Context Protocol, providing:
mcp-runner-lib/
āāā bin/
ā āāā cli.js # CLI entry point
āāā lib/
ā āāā runner.js # Core runner logic
āāā package.json # Project configuration
āāā README.md # This file
adm-zip: ZIP file extractionaxios: HTTP requests for downloading files# Install dependencies
npm install
# Run the CLI tool
node bin/cli.js <server-id>
The tool includes comprehensive error handling for:
"Usage: mcp-run " error
Download failures
Extraction errors
Node.js version issues
runner.js if using a different versionFAQs
A CLI tool to download a ZIP by ID, unzip, and run node mcpServer.js
The npm package @postman/postman-mcp-cli receives a total of 35 weekly downloads. As such, @postman/postman-mcp-cli popularity was classified as not popular.
We found that @postman/postman-mcp-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 415 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.