
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@zeroheight/mcp-server
Advanced tools
MCP server for zeroheight
For a full walkthrough on how to use this MCP server, head over to our help centre article.
Add to Claude Desktop or VSCode (including Cursor/Windsurf) config:
"mcpServers": {
"zeroheight": {
"command": "npx",
"args": ["-y", "@zeroheight/mcp-server@latest"],
"env": {
"ZEROHEIGHT_ACCESS_TOKEN": "zhat_abc123",
"ZEROHEIGHT_CLIENT_ID": "zhci_abc123"
}
}
}
You will need to add your zeroheight authentication credentials as environment variables, which can be created using these instructions:
ZEROHEIGHT_CLIENT_ID="your-client-id"
ZEROHEIGHT_ACCESS_TOKEN="your-access-token"
The server provides these MCP tools:
list-styleguides List all accessible styleguides as resource links or markdown
get-styleguide-tree Get a navigation hierarchy for a styleguide with top-level navigation, categories, pages and tabs
list-pages List all accessible pages in a styleguide with optional search
get-page Get a styleguide page in the requested format (markdown or JSON)
{
"mcpServers": {
"zeroheight": {
"command": "npx",
"args": ["-y", "@zeroheight/mcp-server@latest"],
"env": {
"ZEROHEIGHT_ACCESS_TOKEN": "zhat_abc123",
"ZEROHEIGHT_CLIENT_ID": "zhci_abc123"
}
}
}
}
Create .vscode/mcp.json:
{
"servers": {
"zeroheight": {
"command": "npx",
"args": ["-y", "@zeroheight/mcp-server@latest"],
"env": {
"ZEROHEIGHT_ACCESS_TOKEN": "zhat_abc123",
"ZEROHEIGHT_CLIENT_ID": "zhci_abc123"
}
}
}
}
"List my styleguides"
"Show pages about buttons"
"Get the navigation for [styleguide name]"
"Find documentation about typography"
More info on setup can be found in the help centre article.
FAQs
MCP server for zeroheight
The npm package @zeroheight/mcp-server receives a total of 101 weekly downloads. As such, @zeroheight/mcp-server popularity was classified as not popular.
We found that @zeroheight/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.