
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
coda-mcp-v2
Advanced tools
This project implements a Model Context Protocol (MCP) server that acts as a bridge to interact with the Coda API. It allows an MCP client (like an AI assistant) to perform actions on Coda pages, such as listing, creating, reading, updating, duplicating, and renaming.
The server exposes the following tools to the MCP client:
coda_list_documents: Lists all documents available to the user.coda_list_pages: Lists all pages within the configured Coda document with pagination support.coda_create_page: Creates a new page in the document, optionally under a specified parent page (creating a subpage) and populating it with initial markdown content.coda_get_page_content: Retrieves the content of a specified page (by ID or name) as markdown.coda_replace_page_content: Replaces the content of a specified page with new markdown content.coda_append_page_content: Appends new markdown content to the end of a specified page.coda_duplicate_page: Creates a copy of an existing page with a new name.coda_rename_page: Renames an existing page.coda_peek_page: Peek into the beginning of a page and return a limited number of lines.coda_resolve_link: Resolve metadata given a browser link to a Coda object.coda_list_tables: List tables in a document.coda_list_columns: List columns in a table.coda_list_rows: List rows in a table with optional filtering and sorting.coda_get_row: Get a single row from a table.coda_upsert_rows: Insert or upsert rows into a table.coda_update_row: Update a single row in a table.coda_delete_row: Delete a single row from a table.coda_delete_rows: Delete multiple rows from a table.coda_push_button: Push a button column on a row in a table.Add the MCP server to Cursor/Claude Desktop/etc. like so:
{
"mcpServers": {
"coda": {
"command": "npx",
"args": ["-y", "coda-mcp@latest"],
"env": {
"API_KEY": "..."
}
}
}
}
Required environment variables:
API_KEY: Your Coda API key. You can generate one from your Coda account settings.This MCP server is also available with Docker, like so:
{
"mcpServers": {
"coda": {
"command": "docker",
"args": ["run", "-i", "--rm", "-e", "API_KEY", "reaperberri/coda-mcp:latest"],
"env": {
"API_KEY": "..."
}
}
}
}
Prerequisites:
Clone the repository:
git clone <repository-url>
cd coda-mcp
Install dependencies:
pnpm install
Build the project:
pnpm build
This compiles the TypeScript code to JavaScript in the dist/ directory.
The MCP server communicates over standard input/output (stdio). To run it, set the environment variables and run the compiled JavaScript file - dist/index.js.
FAQs
MCP Server for Coda
We found that coda-mcp-v2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.