
Security News
How AI Agents Expand the Software Supply Chain Attack Surface
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.
@verbumia/mcp
Advanced tools
MCP server for Verbumia translation management — wires Claude Desktop and other MCP clients into your project's keys, missing-key feed, and translation drafts.
MCP server for Verbumia — wires Claude Desktop and other Model Context Protocol clients into your translation project.
This npm package bundles the Python MCP server source (no PyPI
download). The launcher picks the best Python runtime on your host and
runs the bundled verbumia_mcp directly.
{
"mcpServers": {
"verbumia": {
"command": "npx",
"args": ["-y", "@verbumia/mcp"],
"env": {
"VERBUMIA_API_KEY": "vrb_live_<prefix>.<secret>",
"VERBUMIA_PROJECTS": "<project_uuid>",
"VERBUMIA_BASE_URL": "https://api.verbumia.dev"
}
}
}
}
For multiple projects (v0.11+), comma-separate the UUIDs in
VERBUMIA_PROJECTS. The LLM then has to pass project_uuid on every tool
call:
"env": {
"VERBUMIA_API_KEY": "vrb_live_<prefix>.<secret>",
"VERBUMIA_PROJECTS": "01993a..,01993b..,01993c.."
}
Restart Claude Desktop. All thirteen Verbumia tools (list_projects,
get_project_info, list_keys, list_untranslated_keys,
list_missing_keys, missing_keys_stats, acknowledge_missing_keys,
create_key, propose_translation, publish_cdn,
validate_translations, project_context_get, project_context_set)
become callable from your prompt.
The npm tarball ships the Python sources under python/ plus a pre-built
wheel under python/dist/. The Node bin tries these in order:
uvx --from <bundled_wheel> verbumia-mcp — fastest, ephemeral
venv. Recommended.uv run --project <bundled_dir> verbumia-mcp — uv-managed,
resolves deps from pyproject.toml.pipx run --spec <bundled_wheel> verbumia-mcp — pipx-managed.~/.verbumia/mcp-venv-<wheelhash>/ — last-resort
fallback that requires only python3 >= 3.12. Slow first run, fast
thereafter.Stdio is fully passthrough so the MCP JSON-RPC framing is preserved.
| Var | Required | Default | Notes |
|---|---|---|---|
VERBUMIA_API_KEY | yes | Bearer ApiKey token. VERBUMIA_TOKEN accepted (back-compat) | |
VERBUMIA_BASE_URL | no | https://api.verbumia.dev | Self-host / staging override. VERBUMIA_API_BASE accepted (back-compat) |
VERBUMIA_PROJECTS | no | (LLM picks per call) | CSV of project UUIDs. When >1, the LLM MUST pass project_uuid per call. |
VERBUMIA_PROJECT | no | (legacy) | Singular fallback for v0.10.x users. Ignored when VERBUMIA_PROJECTS is set (warns). |
One of:
npx -y @verbumia/mcp --self-check
# -> @verbumia/mcp launchers detected: uvx, uv, python3
# -> @verbumia/mcp bundled wheel: <node_modules>/.../python/dist/verbumia_mcp-…whl
MIT.
FAQs
MCP server for Verbumia translation management — wires Claude Desktop and other MCP clients into your project's keys, missing-key feed, and translation drafts.
The npm package @verbumia/mcp receives a total of 20 weekly downloads. As such, @verbumia/mcp popularity was classified as not popular.
We found that @verbumia/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.