
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A versatile toolkit for building and managing Cloudflare Workers applications, including AI integrations, project scaffolding, and component management.
Before you begin, ensure you have:
npm install -g wrangler
wrangler login
npm install flary
Create a new Flary project interactively:
flary init
This command will:
Follow the provided steps after creation:
Navigate to your project:
cd your-project-name
Install dependencies:
npm install
Start development server:
npm run dev
Import and organize components from v0.dev:
# Default directory (src/components)
flary v0 "https://v0.dev/chat/your-component-url"
# Custom directory
flary v0 --dir game-components "https://v0.dev/chat/your-component-url"
Options:
-d, --dir <directory>: Specify target subdirectory (relative to src/).-h, --help: Display help information.Deploy your Flary application to Cloudflare Workers:
Build your application:
npm run build
Deploy to Cloudflare Workers:
npm run deploy
# or directly with wrangler
wrangler deploy
Your application will be deployed to https://<project-name>.<your-subdomain>.workers.dev
Set environment variables for production:
# Set a secret
wrangler secret put MY_SECRET
# Set a variable in wrangler.toml
wrangler deploy --var MY_VAR=value
Initialize MCP instance and register tools:
import { z } from "zod";
import { MCP } from "flary";
const app = new MCP({
name: "test-mcp",
description: "A test MCP",
version: "1.0.0",
});
const sumSchema = z
.object({
a: z.number().describe("The first number to add"),
b: z.number().describe("The second number to add"),
})
.describe("Calculate the sum of two numbers");
async function calculateSum({ a, b }: z.input<typeof sumSchema>) {
return a + b;
}
calculateSum.schema = sumSchema;
app.tool("calculate_sum", calculateSum);
export default app;
export const { McpObject } = app;
Supports Bearer token authentication:
const app = new MCP({
auth: {
type: "bearer",
token: "your-secret-token",
validate: async (token) => token === (await getValidToken()),
},
});
/ or /sse./ or /ws.Cursor uses SSE exclusively:
https://your-worker.workers.dev/?key=your-secret-token
Publicly accessible MCP server:
const app = new MCP({
name: "test-mcp",
description: "A test MCP",
version: "1.0.0",
});
MCP requires Durable Objects for state management. Configure them in your wrangler.json:
{
"durable_objects": {
"bindings": [{ "name": "McpObject", "class_name": "McpObject" }]
},
"migrations": [{ "tag": "v1", "new_classes": ["McpObject"] }]
}
Make sure to export the McpObject from your worker entry point as shown in the Basic Usage example.
MIT © flary
FAQs
mixed assortment of tools for cloudflare workers
We found that flary demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.