
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
Ainovaq SDK and command-line tool: services, blog search, contact details and MCP setup for Ainovaq, the AI venture studio.
Command-line tool for Ainovaq, the AI venture studio. From your terminal you can:
No account or API key needed.
npx ainovaq services
Or install it globally:
npm install -g ainovaq
Requires Node.js 18 or newer.
| Command | What it does |
|---|---|
ainovaq services | List the five services: Build, GTM, Digital, Talent, Infra |
ainovaq service <id> | Details of one service, e.g. ainovaq service gtm |
ainovaq search <words> [-n 5] | Search Ainovaq blog articles, e.g. ainovaq search "mvp timeline" |
ainovaq contact | Email, phone, LinkedIn and the link to book a free consultation |
ainovaq mcp | MCP client config for Claude, Cursor and other MCP clients |
ainovaq mcp-server | Run the Ainovaq MCP server over stdio, for clients that launch local servers |
Add --json to any command for machine-readable output (for scripts and AI agents).
The same package is also a library (types included):
const { Ainovaq } = require('ainovaq'); // or: import { Ainovaq } from 'ainovaq'
const client = new Ainovaq();
const services = await client.services(); // [{ id, name, type, summary, url }]
const gtm = await client.service('gtm');
const articles = await client.searchArticles('mvp', { limit: 3 });
const article = await client.article('startup-mvp-development'); // slug or ID, includes HTML
const categories = await client.categories();
const results = await client.search('venture studio'); // articles and pages
const contact = await client.contact();
Errors throw AinovaqError. Python (pip install ainovaq) and Ruby (gem install ainovaq) SDKs have the same methods.
Remote (Streamable HTTP): https://ainovaq.com/mcp.
Local (stdio), for clients that launch servers themselves:
{ "mcpServers": { "ainovaq": { "command": "npx", "args": ["-y", "ainovaq", "mcp-server"] } } }
Registry name: com.ainovaq/mcp. Tools: list_services, get_service_details, search_blog, get_contact_info.
The CLI calls Ainovaq's public, read-only interfaces:
https://ainovaq.com/mcphttps://ainovaq.com/wp-json/wp/v2 (OpenAPI: https://ainovaq.com/openapi.json)Developer docs: https://ainovaq.com/developers/
MIT © Ainovaq Solutions LLC
FAQs
Ainovaq SDK and command-line tool: services, blog search, contact details and MCP setup for Ainovaq, the AI venture studio.
The npm package ainovaq receives a total of 168 weekly downloads. As such, ainovaq popularity was classified as not popular.
We found that ainovaq demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.