
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@usevynix/mcp-server
Advanced tools
Model Context Protocol server that exposes Vynix annotations to AI coding agents.
A Model Context Protocol server that gives AI coding agents (Claude, Copilot, Cursor, …) direct access to your PinPoint annotations — so an agent can read the feedback, see the captured context and screenshots, run an AI diagnosis, generate a fix prompt, open a GitHub issue, update status, and comment, all without leaving the editor.
Every tool carries MCP annotations (read-only / idempotent / open-world hints) so a client can auto-approve safe reads and confirm before writes, AI spend, or GitHub calls.
Read-only:
| Tool | Description |
|---|---|
list_projects | List the projects you own. |
list_annotations | List a project's annotations, filtered by status / type / priority. |
get_annotation | Fetch one annotation with full page / element / DOM / diagnostics context. |
list_comments | Read an annotation's discussion thread. |
get_annotation_analysis | Read the latest AI diagnosis (root causes, fix, likely files). |
get_annotation_screenshots | Return attached screenshots as viewable images. |
list_annotation_issues | List the GitHub issues opened from an annotation (optionally live). |
list_project_issues | List every tracker issue across a project, with a summary. |
generate_prompt | Produce a ready-to-paste prompt (claude/copilot/cursor/gemini/codex/generic). |
get_metrics | KPI counts, status breakdown, time series, recent activity. |
list_members | A project's team members. |
get_activity | A project's recent activity feed. |
Writes (a client should confirm these):
| Tool | Description |
|---|---|
update_annotation_status | Move an annotation to in_progress, completed, etc. |
add_comment | Post a comment to an annotation's thread (notifies the team). |
diagnose_annotation | Run the AI Diagnosis Engine (uses an AI provider; stores the result). |
create_github_issue | File a GitHub issue from an annotation. |
create_share_link | Mint a read-only public review link for a project. |
| Prompt | Description |
|---|---|
fix_annotation | A guided, step-by-step workflow that walks the agent from an annotation through context → screenshots → AI diagnosis → fix → status + comment. |
The server talks to the PinPoint API. Authenticate with either a token or credentials:
cp .env.example .env
# Set PINPOINT_API_URL and either PINPOINT_API_TOKEN
# or PINPOINT_API_EMAIL + PINPOINT_API_PASSWORD.
When credentials are supplied, the server logs in on demand and refreshes the token automatically if it expires.
npm install
npm run build
npm start # runs dist/index.js over stdio
npm run dev # watch mode with tsx
npm test # smoke test: launches the server and verifies the tool + prompt surface
Most MCP clients take a command + environment. Example (Claude Desktop /
claude_desktop_config.json, or VS Code mcp.json):
{
"mcpServers": {
"pinpoint": {
"command": "node",
"args": ["/absolute/path/to/PinPoint/mcp-server/dist/index.js"],
"env": {
"PINPOINT_API_URL": "http://localhost:8080",
"PINPOINT_API_EMAIL": "you@example.com",
"PINPOINT_API_PASSWORD": "your-password"
}
}
}
}
Diagnostics are written to stderr; stdout is reserved for the protocol stream.
FAQs
Model Context Protocol server that exposes Vynix annotations to AI coding agents.
The npm package @usevynix/mcp-server receives a total of 32 weekly downloads. As such, @usevynix/mcp-server popularity was classified as not popular.
We found that @usevynix/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.