
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
collimer-mcp
Advanced tools
MCP server for Collimer — run a free AI-search visibility scan on any website and get the score, top gap, and a branded report.
An MCP server that lets AI agents run a free Collimer AI-search visibility scan on any website — how visible a brand is in ChatGPT, Perplexity, Google AI Overviews, and other answer engines.
It exposes one tool, beacon_free_scan, which returns a depth-gated teaser: an AI-visibility score, a confidence interval, the single biggest gap, and a branded report URL. The full report (share of voice across each engine + every recommendation) unlocks with a free account on the web.
Add to your MCP config (e.g. claude_desktop_config.json):
{
"mcpServers": {
"collimer": {
"command": "npx",
"args": ["-y", "collimer-mcp"]
}
}
}
Then ask your assistant something like "How visible is example.com in AI search?" — it will call beacon_free_scan.
beacon_free_scan(domain, email?)
domain — the website to scan, e.g. example.com or https://example.com.email (optional) — emails the report and speeds claiming the account later.Returns the teaser (score, confidence interval, top gap, report URL, and an unlock link). It never returns the full report — that is gated behind a free account.
| Var | Default | Purpose |
|---|---|---|
COLLIMER_API_BASE | https://app.collimer.com | API base URL |
COLLIMER_SCAN_SOURCE | mcp | Funnel attribution channel |
COLLIMER_MAX_POLLS | 60 | Max poll attempts |
COLLIMER_POLL_INTERVAL_MS | 5000 | Poll interval |
COLLIMER_REQUEST_TIMEOUT_MS | 30000 | Per-request timeout |
npm install
npm run build # → dist/
npm run smoke # real scan against prod, prints the teaser
npm run test:protocol # spawns the server + calls the tool over MCP/stdio
The public API it wraps is documented at https://app.collimer.com/docs (OpenAPI: /api/v1/openapi.json).
MIT
FAQs
MCP server for Collimer — run a free AI-search visibility scan on any website: score, top findings, and the upgrade path to a full ranked fix plan with verification.
We found that collimer-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.