
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
MCP server for Comber — run every-click QA checks from any MCP client (Cursor, Claude, Windsurf, Zed). Crawls a web app or API surface and reports what washed up.
An MCP server for Comber — the every-click QA agent. Point your editor's agent at a preview URL and it walks every inch of the app, then reports the broken clicks, dead ends, console errors, and broken links right inline.
One server, every MCP client: Cursor, Claude Desktop, Claude Code, Windsurf, Zed.
| Tool | What it does |
|---|---|
comber_check | Crawl a web app / preview URL and report findings. Read-only by default. |
comber_api_check | Exercise an OpenAPI spec, GraphQL endpoint, or recorded HAR. |
comber_report | Pull the full findings list from a prior run. |
Checks are read-only by default — Comber does not submit forms or trigger mutations unless you
explicitly pass allowWrites. The optional LLM finding-judge only runs when you have your own
ANTHROPIC_API_KEY in the environment; nothing is billed to Comber.
The server runs straight from npm — no clone, no build.
Settings → MCP → Add new server, or drop this in .cursor/mcp.json (project) or
~/.cursor/mcp.json (global):
{
"mcpServers": {
"comber": {
"command": "npx",
"args": ["-y", "comber-mcp"],
"env": { "ANTHROPIC_API_KEY": "" }
}
}
}
Leave ANTHROPIC_API_KEY empty for heuristic-only checks, or set it to enable the LLM judge.
claude mcp add comber -- npx -y comber-mcp
In claude_desktop_config.json:
{
"mcpServers": {
"comber": { "command": "npx", "args": ["-y", "comber-mcp"] }
}
}
In ~/.codeium/windsurf/mcp_config.json — same mcpServers shape as above.
In settings.json:
{
"context_servers": {
"comber": { "command": { "path": "npx", "args": ["-y", "comber-mcp"] } }
}
}
Once installed, just ask your agent:
Run comber on
https://my-branch.preview.appand fix anything that fails.
The agent calls comber_check, gets a coverage + findings summary back, and can call
comber_report for the full detail before proposing fixes.
Gate a merge:
Run comber with strict on the preview and block if there are any fail findings.
npx playwright install chromium once if you hit a launch error.maxStates, maxActions) are exposed as tool inputs.FAQs
MCP server for Comber — run every-click QA checks from any MCP client (Cursor, Claude, Windsurf, Zed). Crawls a web app or API surface and reports what washed up.
We found that comber-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.