
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Transform Amp into a general-purpose agent through end-user extensibility using MCP servers
Transform Amp into a general-purpose agent through end-user extensibility using MCP servers and configuration.
Welcome to AmpGI! This guide will walk you through everything you need to get started, even if you're new to coding or command-line tools.
Before installing AmpGI, you need these tools installed on your computer:
node --version
npm --version
You should see version numbers for both commands.Choose one option:
Option A: VS Code Extension (Easiest)
Option B: Command Line Tool
Open your terminal (Command Prompt on Windows, Terminal on Mac/Linux) and run:
npm install -g ampgi
What this does: Downloads and installs AmpGI globally on your computer, making the ampgi
command available anywhere.
AmpGI comes with pre-configured profiles for different use cases. Pick the one that best matches your needs:
File management, memory, and productivity tools with Notion integration.
ampgi install --profile personal
Complete development environment with Git, database, and testing tools.
ampgi install --profile developer
Web research, data collection, and knowledge management with search capabilities.
ampgi install --profile researcher
Advanced problem-solving with structured thinking and time awareness.
ampgi install --profile thinker
Some servers require API keys or authentication. AmpGI will guide you through this:
ampgi auth setup <server-name>
Common servers requiring authentication:
Test that everything is working correctly:
ampgi test --all
What this does: Checks that all your installed MCP servers are running properly.
For VS Code Users:
For CLI Users:
You can now use Amp for advanced tasks. Here are some examples:
"Create a folder called 'Project Notes' in my Documents and organize my files by date"
"Find all PDF files on my desktop and move them to a new folder"
"Make a backup copy of my important documents"
"Remember that my team meeting is every Wednesday at 2 PM"
"Save this information about the new project requirements"
"What did I save about John's contact information?"
"Take a screenshot of this webpage and save it to my research folder"
"Search for the latest news about AI and summarize the key points"
"Visit this website and extract the main contact information"
Here are the main AmpGI commands you'll use:
# See all available profiles and servers
ampgi list
# Install a specific profile
ampgi install --profile personal
# Set up authentication for servers
ampgi auth setup <server-name>
ampgi auth list
# Test your installation
ampgi test --all
# Discover additional MCP servers
ampgi discover
ampgi search "database"
# Security and configuration
ampgi security status
ampgi security safe-mode on
# See what's currently installed
ampgi list --installed
# Get help with any command
ampgi --help
Solution: Make sure you installed with the -g
flag:
npm install -g ampgi
Solution: Install Amp first (see Step 1), then restart your terminal.
Solution:
node --version
ampgi test --server filesystem
ampgi auth list
Solution: Some servers need permission to access files. This is normal and secure - Amp will ask before accessing sensitive data.
Solution: Set up authentication for the server:
ampgi auth setup <server-name>
Solution: AmpGI protects new users by blocking high-privilege servers. To allow:
ampgi security safe-mode off
AmpGI is designed with enterprise-grade security:
ampgi security audit
If you run into issues:
ampgi test --all
ampgi list --servers
Once you're comfortable with the basics:
ampgi discover
to find additional MCP serversnpm install -g ampgi
ampgi install --profile personal
AmpGI extends Amp's capabilities by leveraging the existing MCP (Model Context Protocol) server ecosystem. Instead of requiring changes to Amp itself, users can configure their installation to add capabilities like:
npm install -g ampgi
ampgi install --profile personal
curl -s https://raw.githubusercontent.com/DannyMac180/AmpGI/main/examples/personal-assistant.json > ~/.ampgi-config.json
ampgi apply ~/.ampgi-config.json
Add MCP servers directly to your Amp settings:
{
"amp.mcpServers": {
"filesystem": {
"command": "npx",
"args": ["@modelcontextprotocol/server-filesystem", "--allowed-directory", "/Users/username/Documents"]
},
"gmail": {
"command": "npx",
"args": ["@modelcontextprotocol/server-gmail"],
"env": { "GMAIL_CREDENTIALS": "~/.ampgi/gmail-oauth.json" }
}
}
}
Once configured, you can use Amp for tasks like:
User: "Schedule a meeting with John next Tuesday at 2pm and send him the agenda"
Amp: [uses calendar MCP + email MCP to schedule and notify]
User: "Analyze my project's GitHub issues and create a status report"
Amp: [uses GitHub MCP + document MCP to fetch data and generate report]
User: "Backup my important documents to Dropbox and organize them by date"
Amp: [uses cloud MCP + file organization MCP]
See our Contributing Guide for how to:
MIT License - see LICENSE for details.
FAQs
Transform Amp into a general-purpose agent through end-user extensibility using MCP servers
The npm package ampgi receives a total of 221 weekly downloads. As such, ampgi popularity was classified as not popular.
We found that ampgi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.