
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@qikdev/mcp
Advanced tools
A plug-and-play Model Context Protocol server for the Qik platform - enabling AI assistants to interact with Qik's content management system, user management, forms, files, and more.
A comprehensive Model Context Protocol (MCP) server for the Qik platform, enabling AI assistants to interact intelligently with Qik's content management system, user management, forms, files, and more.
npm install -g @qikdev/mcp
qik-mcp-server setup
This will guide you through:
Get your Qik API Access Token:
Configure Environment Variables:
export QIK_ACCESS_TOKEN="your_access_token_here"
export QIK_API_URL="https://api.qik.dev" # Optional, defaults to this
Add to MCP Configuration: Add this to your MCP settings file:
{
"mcpServers": {
"qik": {
"command": "npx",
"args": ["@qikdev/mcp", "run"],
"env": {
"NODE_ENV": "production"
}
}
}
}
qik_get_user_session - Get current user session informationqik_get_glossary - Get all available content types and their definitionsqik_get_content_definition - Get detailed definition for a specific content typeqik_get_content - Get content item by ID or slugqik_list_content - List content items with filtering and searchqik_create_content - Create new content item with validationqik_update_content - Update existing content item (partial or full replace)qik_delete_content - Delete content itemqik_list_profiles - Search and list profiles/peopleqik_create_profile - Create new profile/personqik_get_form - Get form definitionqik_submit_form - Submit form dataqik_upload_file - Upload files to Qik (supports base64 encoding)qik_search_content - Global content search across all typesqik_get_scopes - Get available scopes/permissions treeqik_get_smartlist - Execute smartlist queries// Get all available content types
const glossary = await qik_get_glossary();
// Get specific content type definition
const articleDef = await qik_get_content_definition({ type: "article" });
// The server automatically validates against your content type definition
const newArticle = await qik_create_content({
type: "article",
title: "My New Article",
data: {
body: "Article content here...",
author: "John Doe"
},
meta: {
scopes: ["public"],
security: "public"
}
});
// Search across all content types
const results = await qik_search_content({
query: "important announcement",
types: ["article", "event"],
limit: 10
});
// List specific content type with filters
const articles = await qik_list_content({
type: "article",
search: "announcement",
filter: {
operator: "and",
filters: [{
key: "meta.status",
comparator: "equal",
value: "active"
}]
},
sort: {
key: "meta.created",
direction: "desc",
type: "date"
}
});
The server automatically:
QIK_ACCESS_TOKEN - Your Qik API access token (required)QIK_API_URL - Qik API base URL (optional, defaults to https://api.qik.dev)The server automatically caches glossary data for 5 minutes to improve performance while ensuring content type information stays current.
# Check your token status
qik-mcp-server status
# Reconfigure if needed
qik-mcp-server setup
"Content type 'xyz' not found"
qik_get_glossary to see all available types"Field validation errors"
qik_get_content_definition to see field requirements for a content type"Access denied"
For detailed API documentation, visit: https://docs.qik.dev/api
git checkout -b feature/amazing-feature)git commit -m 'Add some amazing feature')git push origin feature/amazing-feature)This project is licensed under the MIT License - see the LICENSE file for details.
Built with ❤️ by the Qik team
FAQs
A plug-and-play Model Context Protocol server for the Qik platform - enabling AI assistants to interact with Qik's content management system, user management, forms, files, and more.
The npm package @qikdev/mcp receives a total of 3 weekly downloads. As such, @qikdev/mcp popularity was classified as not popular.
We found that @qikdev/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.