
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@tonic-ui/mcp
Advanced tools
A Model Context Protocol (MCP) server for Tonic UI.
The Tonic UI MCP server provides structured access to Tonic UI documentation and resources. It enables AI agents and tools to retrieve detailed information about Tonic UI, including:
Learn more about MCP in the official MCP documentation.
To get started, first clone the Tonic UI repository by running:
git clone https://github.com/trendmicro-frontend/tonic-ui.git
Be sure to replace the /path/to/tonic-ui
placeholder with the actual location of your repository when following this guide.
⚠️ The current MCP solution for Tonic UI is not a cloud-hosted service. You must clone the repository and run the MCP server locally in order to use it.
For use with the Tonic UI MCP server, the recommended AI coding assistants are Claude Code and Roo Code.
Claude Code supports three different scopes. Choose one based on your requirements:
Local scope (default)
claude mcp add tonic-ui npx -- -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
# Or explicitly specify local scope
claude mcp add -s local tonic-ui npx -- -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
Project scope
claude mcp add -s project tonic-ui npx -- -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
This will generate a .mcp.json
file similar to the following:
{
"mcpServers": {
"tonic-ui": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@tonic-ui/mcp",
"--config",
"/path/to/tonic-ui/tonic-ui-mcp.config.js"
]
}
}
}
User scope
claude mcp add -s user tonic-ui npx -- -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
Roo Code is an open-source Visual Studio Code extension designed to enhance the coding workflow with AI capabilities.
Once Roo Code is properly configured:
Open the "View and More Actions..." dropdown at the top right and choose "MCP Servers"
Click Edit Global MCP to modify global MCP server settings
Paste the following into your mcp_settings.json
file:
{
"mcpServers": {
"tonic-ui": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@tonic-ui/mcp",
"--config",
"/path/to/tonic-ui/tonic-ui-mcp.config.js"
]
},
}
}
For information on configuring the GitHub MCP server, see Using the GitHub MCP Server.
Add the following configuration to your .vscode/mcp.json
file:
{
"servers": {
"tonic-ui": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@tonic-ui/mcp",
"--config",
"/path/to/tonic-ui/tonic-ui-mcp.config.js"
]
},
}
}
Save the .vscode/mcp.json
file.
A "Start" button will appear in your .vscode/mcp.json
file, at the top of the list of servers. Click the "Start" button to start the MCP servers. This will trigger the input dialog and discover the server tools, which are then stored for later sessions.
Open Copilot Chat by clicking the Copilot icon in the title bar of Visual Studio Code.
In the Copilot Chat box, select Agent from the popup menu.
To view your list of available MCP servers, click the gear icon at the top right and choose "MCP Servers". This will display the MCP server list, where you can see all the MCP servers and associated tools that are currently available in your Visual Studio Code instance.
For more information on configuring MCP servers in Visual Studio Code, see Use MCP servers in Visual Studio Code in the Visual Studio Code documentation.
Visual Studio Code requires specific settings to enable MCP functionality:
settings.json
:
{
"chat.mcp.enabled": true,
"chat.mcp.discovery.enabled": true
}
The Tonic UI MCP server supports stdio, Streamable HTTP, and Server-Sent Events (SSE). The transport can be specified via the --type
option. For HTTP-based transports, if the designated port is unavailable, the server will automatically bind to the next available port.
Run the server with stdio transport (default):
npx -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
Configuration for stdio transport:
{
"mcpServers": {
"tonic-ui": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@tonic-ui/mcp",
"--config",
"/path/to/tonic-ui/tonic-ui-mcp.config.js"
]
}
}
}
Run the server with Streamable HTTP transport:
npx -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js --type streamable-http --port 3000
Configuration for Streamable HTTP transport:
{
"mcpServers": {
"tonic-ui": {
"type": "streamable-http",
"url": "http://127.0.0.1:3000/mcp"
}
}
}
Run the server with SSE transport:
npx -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js --type sse --port 3000
Configuration for SSE transport:
{
"mcpServers": {
"tonic-ui": {
"type": "sse",
"url": "http://127.0.0.1:3000/sse"
}
}
}
Use the MCP inspector to verify your setup:
Install the MCP Inspector globally:
npm install -g @modelcontextprotocol/inspector
Launch the MCP Inspector:
mcp-inspector
In the MCP Inspector UI, enter the following values for stdio transport:
STDIO
npx
-y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
The Tonic UI MCP server requires a configuration file to specify the documentation packages it will serve. A sample tonic-ui-mcp.config.js
file is included in the root directory of the Tonic UI repository.
// tonic-ui-mcp.config.js
module.exports = {
packages: [
{
// The name of the package.
name: '@tonic-ui/react',
// The version of the package.
version: 'v2',
// An absolute URL or file path to the LLMs documentation file.
// Must be a valid `file://`, `http://`, or `https://` URL, or a local path.
llms: '/path/to/tonic-ui/packages/react-docs/pages/llms.txt',
// An absolute URL or file path pointing to the root directory of the documentation pages.
// Valid values include `file://`, `http://`, or `https://` URLs, or a local path.
// This is used to substitute `{{PAGE_BASE}}` placeholders in the LLMs documentation.
pageBase: '/path/to/tonic-ui/packages/react-docs/pages/',
}
]
};
The configuration file can be written in JavaScript (.js
) or JSON (.json
) format and must be specified via the --config
command-line option when running the MCP server:
npx -y @tonic-ui/mcp --config /path/to/tonic-ui/tonic-ui-mcp.config.js
FAQs
A Model Context Protocol (MCP) server for Tonic UI.
We found that @tonic-ui/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.