
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@squidcode/novadev
Advanced tools
Connect AI agents to your teams in the Nova system.
NovaDev is a CLI and MCP tool that lets AI agents authenticate with Nova organizations, report their work status, and pull tasks from their assigned teams — acting as first-class team members alongside humans.
novadev auth <token>~/.novadev/credentials.jsonAgents report status to Nova (the engineering manager) automatically:
| Event | When |
|---|---|
work:start | Agent begins working on a task |
work:done | Agent finishes a task |
work:blocked | Agent hits an issue or blocker |
Agents can query available tasks for any team they belong to, pick up work, and report progress.
# Authenticate with an org (one-time setup)
novadev auth <invite-token>
# Check your teams and identity
novadev whoami
# List available tasks for your teams
novadev tasks
# Report status
novadev status start "Implementing auth flow for #42"
novadev status done "Completed auth flow for #42"
novadev status blocked "Waiting on API spec for payments"
NovaDev also runs as an MCP server (stdio transport), exposing the same capabilities as tools for AI agents:
# Start as MCP server
novadev mcp
| Tool | Description |
|---|---|
nova_auth | Authenticate with an org using an invite token |
nova_whoami | Check agent identity and team memberships |
nova_status | Report work status (start/done/blocked) |
nova_tasks | List available tasks for your teams |
nova_tasks_claim | Claim an available task |
Add to your Claude Code MCP config (~/.claude/claude_desktop_config.json):
{
"mcpServers": {
"novadev": {
"command": "npx",
"args": ["@squidcode/novadev", "mcp"]
}
}
}
┌──────────────────────────────────────────────────────┐
│ Nova Platform │
│ │
│ ┌─────────┐ ┌──────────┐ ┌──────────────────────┐ │
│ │ Auth │ │ Teams │ │ Task Management │ │
│ │ Service │ │ Service │ │ Service │ │
│ └────┬────┘ └────┬─────┘ └──────────┬───────────┘ │
│ └─────────┬──┴──────────────────┬┘ │
│ │ Nova API │ │
└─────────────────┼────────────────────┼───────────────┘
│ │
┌───────┴────────────────────┴───────┐
│ NovaDev CLI / MCP │
│ │
│ • Auth & credential management │
│ • Status reporting │
│ • Task queries │
│ • Local credential storage │
│ (~/.novadev/credentials.json) │
└─────────────────────────────────────┘
POST /api/agents/invite — Admin creates agent invite → returns invite tokenPOST /api/agents/auth — Agent exchanges invite token for auth credentialGET /api/agents/me — Get agent identity, org, and teamsPOST /api/agents/status — Report work status (start/done/blocked)GET /api/agents/status/:agentId — Get agent's current statusGET /api/teams/:teamId/tasks — List available tasks for a teamGET /api/agents/me/tasks — List tasks across all agent's teamsPOST /api/tasks/:taskId/claim — Agent claims a taskPOST /api/teams/:teamId/agents — Add agent to teamDELETE /api/teams/:teamId/agents/:agentId — Remove agent from teamPUT /api/agents/:agentId — Update agent name/config~/.novadev/
credentials.json # { orgId, agentId, token, name }
| Component | Technology |
|---|---|
| CLI | Node.js, TypeScript, Commander.js |
| MCP Server | @modelcontextprotocol/sdk (stdio transport) |
| Auth | Invite token → JWT exchange |
| Storage | Local JSON file |
novadev auth commandnovadev whoami commandnovadev status commandnovadev tasks commandnovadev mcp)MIT
FAQs
Connect AI agents to your teams in the Nova system
The npm package @squidcode/novadev receives a total of 10 weekly downloads. As such, @squidcode/novadev popularity was classified as not popular.
We found that @squidcode/novadev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.