
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@supavec/mcp-server
Advanced tools
A Model Context Protocol (MCP) server for Supavec that enables AI assistants to fetch relevant embeddings and content
A Model Context Protocol (MCP) server that enables AI assistants to fetch relevant embeddings and content from Supavec.
No installation required! Use directly with npx:
npx @supavec/mcp-server --api-key your_api_key
npm install -g @supavec/mcp-server
supavec-mcp --api-key your_api_key
Add to your .cursor/mcp.json:
{
"mcpServers": {
"supavec": {
"command": "npx",
"args": [
"-y",
"@supavec/mcp-server@latest",
"--api-key",
"your_supavec_api_key"
]
}
}
}
Add to your .vscode/mcp.json:
{
"servers": {
"supavec": {
"command": "npx",
"args": [
"-y",
"@supavec/mcp-server@latest",
"--api-key",
"your_supavec_api_key"
]
}
}
}
Add to your Claude configuration:
{
"mcpServers": {
"supavec": {
"command": "npx",
"args": [
"-y",
"@supavec/mcp-server@latest",
"--api-key",
"your_supavec_api_key"
]
}
}
}
Alternatively, set your API key as an environment variable:
export SUPAVEC_API_KEY=your_supavec_api_key
Then use in your MCP configuration without the --api-key argument:
{
"mcpServers": {
"supavec": {
"command": "npx",
"args": ["-y", "@supavec/mcp-server@latest"]
}
}
}
The server checks for API keys in this order:
--api-key command line argument (highest priority)SUPAVEC_API_KEY environment variablefetch-embeddingsFetch embeddings for a file by ID and query.
Parameters:
file_id (string, required): ID of the file to get embeddings forquery (string, required): Query to search for in the fileExample:
Ask your AI assistant: "Using Supavec, find information about 'authentication' in file abc123"
list-user-filesList all files uploaded to Supavec for the current user.
Parameters:
limit (number, optional): Number of files to fetch (default: 10)offset (number, optional): Offset for pagination (default: 0)order_dir (string, optional): Order direction for results - "asc" or "desc" (default: "desc")Example:
Ask your AI assistant: "List my Supavec files" or "Show me the first 20 files from my Supavec account"
Response includes:
supavec-mcp --help
supavec-mcp --api-key your_api_key_here
export SUPAVEC_API_KEY=your_api_key_here
supavec-mcp
.cursor/mcp.json"Error: Supavec API key is required"
--api-key or SUPAVEC_API_KEY environment variable"Failed to fetch data: status 401"
"Failed to fetch data: status 404"
Run with environment variables to see more details:
DEBUG=1 supavec-mcp --api-key your_key
git clone https://github.com/supavec/mcp-server.git
cd supavec-mcp-server
npm install
npm run build
# Test with MCP Inspector
npm run inspector
# Test command line
npm run build
node build/index.js --help
git checkout -b feature-namegit commit -am 'Add feature'git push origin feature-nameMIT License - see LICENSE for details.
FAQs
A Model Context Protocol (MCP) server for Supavec that enables AI assistants to fetch relevant embeddings and content
We found that @supavec/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.