
Research
/Security News
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
Universal MCP server installer CLI. Add, remove, and manage Model Context Protocol servers across all your coding agents from a single command.
Note: This project is in early development (v0.1.0) and has not been tested with every supported IDE/agent. If you run into a bug, please create an issue.
| Agent | Transports | Scopes |
|---|---|---|
| Claude Desktop | stdio | global |
| Claude Code | stdio | global, project |
| OpenAI Codex | stdio | global, project |
| Cursor | stdio, http, sse | global, project |
| Windsurf | stdio | global |
| VS Code | stdio, http, sse | global, project |
| Zed | stdio | global |
| Sourcegraph Cody | stdio | global |
| Cline | stdio, http, sse | global, project |
| Roo Code | stdio, http, sse | global, project |
| JetBrains | stdio | global, project |
| Neovim | stdio | global |
| Kilo Code | stdio, http, sse | global, project |
| Amazon Q | stdio | global |
| Gemini CLI | stdio | global |
npm install -g everymcp
git clone https://github.com/am-will/everymcp.git
cd everymcp
npm install
npm run build
npm link
npm link creates a symlink so the everymcp command is available on your PATH. You can verify with:
which everymcp
everymcp --version
npx everymcp
everymcp
Launches a TUI that walks you through adding a server to your detected agents.
# stdio server
everymcp add "npx -y @modelcontextprotocol/server-filesystem /home/user/docs"
# HTTP/SSE server
everymcp add "https://mcp.example.com/sse"
# Target specific agents
everymcp add "npx -y some-server" --agents cursor,claude-desktop
# Add to all detected agents
everymcp add "npx -y some-server" --all
# With environment variables
everymcp add "npx -y some-server" -e API_KEY=sk-123 -e DEBUG=true
# With auth token
everymcp add "https://mcp.example.com" --auth-token sk-123
# Custom server name
everymcp add "npx -y some-server" --name my-server
# Dry run (preview changes without writing)
everymcp add "npx -y some-server" --all --dry-run
everymcp remove my-server --agents cursor,vscode
everymcp remove my-server --all
everymcp list
everymcp list --agents claude-desktop
everymcp detect
everymcp backup
everymcp restore
everymcp restore --latest
| Flag | Description |
|---|---|
--agents <list> | Comma-separated agent IDs to target |
--all | Target all detected agents |
--dry-run | Preview changes without writing |
--force | Overwrite existing entries without prompting |
--name <name> | Override the inferred server name |
-e, --env <K=V> | Set environment variable (repeatable) |
--header <K=V> | Set HTTP header (repeatable) |
--auth-token <token> | Set bearer auth token |
--transport <type> | Force transport: stdio, http, or sse |
--global | Use global config scope (default) |
--project | Use project-level config scope |
--no-backup | Skip automatic config backup before changes |
everymcp auto-detects which coding agents are installed on your system by checking for their config files. Each agent has an adapter that knows:
Config files are read and written using jsonc-parser to preserve comments and formatting. Writes are atomic (temp file + rename) with per-file mutex locking to prevent race conditions.
git clone https://github.com/am-will/everymcp.git
cd everymcp
npm install
npm run build # TypeScript compilation
npm run dev # Run directly via tsx
MIT
FAQs
Universal MCP server installer CLI
The npm package everymcp receives a total of 39 weekly downloads. As such, everymcp popularity was classified as not popular.
We found that everymcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.

Research
/Security News
We identified over 20 additional malicious extensions, along with over 20 related sleeper extensions, some of which have already been weaponized.