
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@praveenc/mcp-docs-server
Advanced tools
A Model Context Protocol (MCP) server for searching MCP protocol documentation. Built with TypeScript using the official MCP SDK.
npm install
npm run build
The easiest way to test the server is with the MCP Inspector:
# Build first
npm run build
# Run inspector with compiled JS
npx @modelcontextprotocol/inspector node dist/index.js
# Or run with tsx for development (no build needed)
npx @modelcontextprotocol/inspector npx tsx src/index.ts
Add to your MCP client configuration (e.g., Claude Desktop, Kiro):
{
"mcpServers": {
"mcp-server-builder": {
"command": "node",
"args": ["/path/to/mcp-builder-ts/dist/index.js"]
}
}
}
Or using tsx for development:
{
"mcpServers": {
"mcp-server-builder": {
"command": "npx",
"args": ["tsx", "/path/to/mcp-builder-ts/src/index.ts"]
}
}
}
# Run in development mode
npm run dev
# Run tests
npm test
# Type check
npm run typecheck
# Build
npm run build
# Test with MCP Inspector (after build)
npm run inspect
# Test with MCP Inspector (development, no build needed)
npm run inspect:dev
Search MCP protocol documentation with ranked results.
Parameters:
query (string, required): Search query stringk (number, optional): Maximum results to return (default: 5). Returns fewer if fewer documents match.Example:
{
"query": "transports",
"k": 5
}
Returns:
[
{
"url": "https://modelcontextprotocol.io/specification/2025-11-25/basic/transports.md",
"title": "Transports",
"score": 15.725,
"snippet": "MCP uses JSON-RPC to encode messages..."
}
]
Fetch full document content by URL.
Parameters:
uri (string, required): Document URL from modelcontextprotocol.ioExample:
{
"uri": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools.md"
}
Returns:
{
"url": "https://modelcontextprotocol.io/specification/2025-11-25/server/tools.md",
"title": "Tools",
"content": "# Tools\n\nTools enable servers to expose executable functionality..."
}
src/
├── index.ts # MCP server entry point
├── config.ts # Configuration
├── tools/
│ └── docs.ts # search_mcp_docs, fetch_mcp_doc
└── utils/
├── cache.ts # Document caching
├── doc-fetcher.ts # HTTP fetching & HTML parsing
├── indexer.ts # BM25 search index
├── logger.ts # Logging utilities
├── stopwords.ts # Stop words list
├── text-processor.ts # Text utilities
└── url-validator.ts # URL validation
The search uses BM25 (Best Matching 25) with enhancements:
MIT
FAQs
MCP server for searching MCP protocol documentation
The npm package @praveenc/mcp-docs-server receives a total of 27 weekly downloads. As such, @praveenc/mcp-docs-server popularity was classified as not popular.
We found that @praveenc/mcp-docs-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.