
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
deckbase-mcp-server
Advanced tools
MCP (Model Context Protocol) server for the Deckbase project. Exposes project documentation and tools so Cursor (or other MCP clients) can read Deckbase docs and list/read files.
Two ways to use it:
| Mode | Use case |
|---|---|
| Local (stdio) | Run node mcp-server/index.js; Cursor starts it as a subprocess. No auth. |
| Hosted (HTTP) | Your deployed app exposes POST /api/mcp; clients send an API key (Bearer). Use this to share MCP with your team or use from anywhere. |
Tools
list_docs – List all Markdown files in docs/read_doc – Read a doc by path (e.g. STATE_BASED_SYNC_MOBILE.md or docs/FIRESTORE_FLASHCARDS_MIGRATION.md)Resources
deckbase://docs/<filename> – Read a doc from docs/ (e.g. deckbase://docs/STATE_BASED_SYNC_MOBILE.md)The app exposes POST /api/mcp (JSON-RPC over HTTP). Auth is API key only (no Firebase token). Create an API key in the dashboard and send it as Bearer.
/api/mcp.Create an API key in the dashboard (API keys / MCP page). Copy the key (shown once).
Send a JSON-RPC 2.0 request to https://your-app.com/api/mcp:
Content-Type: application/json, Authorization: Bearer <API key>{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"read_doc","arguments":{"path":"STATE_BASED_SYNC_MOBILE.md"}}}Response: JSON-RPC response, e.g. {"jsonrpc":"2.0","id":3,"result":{...}} or {"jsonrpc":"2.0","id":3,"error":{...}}.
| HTTP | JSON-RPC error | Meaning |
|---|---|---|
| 401 | Missing Authorization: Bearer <API key> | No or invalid header |
| 401 | Invalid or unknown API key | Key not found or invalid |
| 503 | Server not configured | Backend not set up |
Cursor’s URL-based MCP expects a single endpoint. The MCP protocol is request/response, so you can point Cursor at your URL and send the API key in headers. If your Cursor config supports a URL + headers:
{
"mcpServers": {
"deckbase-hosted": {
"url": "https://your-app.vercel.app/api/mcp",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}
Note: API keys do not expire. Use the same key until you revoke it.
Tools
list_docs – List all Markdown files in docs/read_doc – Read a doc by path (e.g. STATE_BASED_SYNC_MOBILE.md or docs/FIRESTORE_FLASHCARDS_MIGRATION.md)Resources
deckbase://docs/<filename> – Read a doc from docs/ (e.g. deckbase://docs/STATE_BASED_SYNC_MOBILE.md)A project-level config is in .cursor/mcp.json. If Cursor uses it, the Deckbase MCP server will appear when you open this repo.
If not, add the server manually in Cursor settings (MCP):
~/.cursor/mcp.json){
"mcpServers": {
"deckbase": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/deckbase-web/mcp-server/index.js"]
}
}
}
Replace /ABSOLUTE/PATH/TO/deckbase-web with your actual project path. No cwd is required; the server resolves paths from its own location.
Restart Cursor (or reload the window) so it picks up the MCP server.
cd deckbase-web
node mcp-server/index.js
Then send JSON-RPC over stdin (newline-delimited JSON). The server responds on stdout.
The server is implemented with plain Node.js (no external dependencies).
FAQs
MCP server for Deckbase - exposes docs and project context
We found that deckbase-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.