
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
Model Context Protocol server for Arca API - Connect your LLM to Arca workspaces and tasks
Model Context Protocol (MCP) server for the Arca API. Enables Claude Desktop and other MCP-compatible LLMs to interact with your Arca workspaces, tasks, lists, folders, and comments.
All operations use your personal Arca API key to authenticate directly with the Arca API.
Add this to your claude_desktop_config.json:
{
"mcpServers": {
"arca": {
"command": "npx",
"args": ["-y", "arca-mcp"],
"env": {
"ARCA_API_KEY": "arca_your_api_key_here"
}
}
}
}
Get your API key from Settings → API Keys in the Arca app.
Config file locations:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json~/.config/Claude/claude_desktop_config.jsonThen restart Claude Desktop to connect.
If you prefer to build locally:
git clone https://github.com/gredevelopment/arca-mcp.git
cd arca-mcp
npm install
npm run build
Update your Claude Desktop config to use the local build:
{
"mcpServers": {
"arca": {
"command": "node",
"args": ["/absolute/path/to/arca-mcp/build/index.js"],
"env": {
"ARCA_API_KEY": "arca_your_api_key_here"
}
}
}
}
Once connected, you can ask Claude to interact with your Arca workspace:
list_workspaces - List all workspaces you have access toget_workspace - Get detailed information about a specific workspacelist_tasks - List tasks in a workspace (optionally filtered by list)get_task - Get detailed information about a taskcreate_task - Create a new taskupdate_task - Update task properties (title, description, status, priority, dates)delete_task - Delete a tasklist_lists - List all lists in a workspace (optionally filtered by folder)create_list - Create a new listupdate_list - Update list propertiesdelete_list - Delete a listlist_folders - List all folders in a workspacecreate_folder - Create a new folderupdate_folder - Update folder propertiesdelete_folder - Delete a folderlist_comments - List all comments on a taskcreate_comment - Add a comment to a tasklist_statuses - List all statuses in a workspacecreate_status - Create a new status (owner/admin only)update_status - Update status properties (owner/admin only)delete_status - Delete a status, optionally reassigning tasks (owner/admin only)list_labels - List all labels in a workspacecreate_label - Create a new labelupdate_label - Update label properties (owner/admin only)delete_label - Delete a label (owner/admin only)npxThe server includes built-in instructions that guide LLMs to make intelligent multi-step decisions. For example:
Instead of saying: "I can't list tasks by workspace name, only by ID"
The LLM will automatically:
list_workspaces to find the workspace ID from the namelist_tasksThis works for common patterns like:
The server instructions are registered as an MCP prompt (server_instructions) that LLMs can reference, plus enhanced tool descriptions that encourage smart workflow patterns.
Your API key is stored locally in the Claude Desktop config and never leaves your machine except to authenticate with the official Arca API (https://api.getarca.app).
For issues or questions:
ISC License - see LICENSE file for details.
FAQs
Model Context Protocol server for Arca API - Connect your LLM to Arca workspaces and tasks
We found that arca-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.