
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@zeugwerk/plcsense
Advanced tools
plcsense MCP server for TwinCAT / Structured Text. Requires PLCSENSE_TOKEN to download and a plcsense licence to use.
npm launcher for the plcsense MCP server (Windows x64).
plcsense is commercial software (license: UNLICENSED). MCP tools stay unavailable
until a valid plcsense licence is activated on the machine.
The launcher downloads the Windows binary from api.zeugwerk.dev. Set the same
token Scoop uses:
$env:PLCSENSE_TOKEN = '<your token>'
Without it, the first npx / MCP start fails before any binary is cached.
plcsense license activate <licence-key>--license-key / set PLCSENSE_LICENSE_KEY when starting MCP)npx)PLCSENSE_TOKEN (download bearer token){
"mcpServers": {
"plcsense": {
"command": "npx",
"args": ["-y", "@zeugwerk/plcsense", "mcp"],
"env": {
"PLCSENSE_TOKEN": "<your token>"
}
}
}
}
Alternatively install the CLI from plcsense.com and run
plcsense setup cursor in your project folder.
Copyright (c) Zeugwerk GmbH. See LICENSE.
FAQs
MCP server for read-only TwinCAT Structured Text intelligence. Lets AI agents resolve symbols, inspect project and library APIs (.library / .compiled-library), pull docs, and validate PLC projects before editing — without TwinCAT XAE. Requires PLCSENSE_TO
The npm package @zeugwerk/plcsense receives a total of 593 weekly downloads. As such, @zeugwerk/plcsense popularity was classified as not popular.
We found that @zeugwerk/plcsense demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.