
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@uibeats/mcp
Advanced tools
MCP server for UI Beats. Let your coding agent search, read and install animated React components.
MCP server for UI Beats. Lets a coding agent search the component catalogue, read a component's full source and props, and install it, without anyone opening the website.
Claude Code:
claude mcp add uibeats -- npx -y @uibeats/mcp
Cursor, Windsurf, Claude Desktop and anything else that reads an
mcpServers block:
{
"mcpServers": {
"uibeats": {
"command": "npx",
"args": ["-y", "@uibeats/mcp"]
}
}
}
| Tool | What it does |
|---|---|
search_components | Rank the catalogue against a plain-language query or a name |
get_component | Full docs for one component: props table, usage example, complete source |
list_components | Everything available, grouped by category |
get_install_command | The exact shadcn command, plus the npm packages it pulls in |
A typical exchange: the agent calls search_components("card that flips"),
then get_component("flip-card") to read the real props before writing any
JSX, then get_install_command("flip-card") and runs it.
There is no backend. The server is a cached client over two static files the site already publishes:
/r/components.json: the search index (names, descriptions, props, guidance)/docs/<category>/<name>.md: the canonical document for one componentThe catalogue is cached in memory for ten minutes, and a stale copy is kept as a fallback so a brief network failure does not break every tool call.
| Variable | Default | Purpose |
|---|---|---|
UIBEATS_URL | https://uibeats.com | Point at a local next dev while working |
UIBEATS_URL=http://localhost:3000 npx @uibeats/mcp
This package is standalone: it is not part of the site's Yarn install.
cd packages/mcp
npm install
npm run build
MIT
FAQs
MCP server for UI Beats. Let your coding agent search, read and install animated React components.
The npm package @uibeats/mcp receives a total of 41 weekly downloads. As such, @uibeats/mcp popularity was classified as not popular.
We found that @uibeats/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.