
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
@smartmemory/compose-mcp
Advanced tools
MCP stdio server for @smartmemory/compose: typed feature management tools (roadmap, changelog, artifact linking, and more). Requires a compose-initialized project.
Slim MCP stdio launcher for @smartmemory/compose. Installing this package transitively pulls the full compose runtime; the compose-mcp binary spawns the embedded MCP server.
Compose is a structured AI dev pipeline that takes a goal to shipped code. Your agent writes the code, Compose makes it prove it: design decisions are gated before any code, every step has to clear its postconditions, and review runs on a different model than the one that wrote the work.
npm install -g @smartmemory/compose-mcp
This installs both @smartmemory/compose-mcp and its peer @smartmemory/compose.
npx -y @smartmemory/compose-mcp
The launcher resolves the embedded MCP server (@smartmemory/compose/mcp) and spawns it with stdio inheritance — suitable for direct Claude Code / MCP client wiring.
Add an entry to .claude/mcp.json:
{
"mcpServers": {
"compose": {
"command": "npx",
"args": ["-y", "@smartmemory/compose-mcp"]
}
}
}
Restart Claude Code; the typed compose tools (roadmap, changelog, artifact linking, journal, completion) become available.
The MCP tools mutate canonical compose artifacts (ROADMAP.md, CHANGELOG.md, docs/features/<code>/, docs/journal/). Run compose-mcp from inside a compose-initialized project — see the compose README for compose init.
Discovery: published as io.github.smartmemory/compose-mcp on the official MCP registry. Installing the slim package keeps npx startup fast while the full runtime is fetched transitively.
MIT — same as the compose root.
FAQs
MCP stdio server for @smartmemory/compose: typed feature management tools (roadmap, changelog, artifact linking, and more). Requires a compose-initialized project.
The npm package @smartmemory/compose-mcp receives a total of 991 weekly downloads. As such, @smartmemory/compose-mcp popularity was classified as not popular.
We found that @smartmemory/compose-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.