
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
go2-mcp-server
Advanced tools
MCP server for Go2 — short links your AI agent can call. Create branded URLs, track every click, query per-run agent attribution. Works in Claude Code, Claude Desktop, Cursor, Windsurf, Codex.
MCP server for Go2 — short links with first-class per-run agent attribution.
Every link an agent creates can carry (agent_id, agent_run_id, agent_actor_id, agent_tool_call_id). Every click is queryable through the same MCP, the REST API, or webhooks.
~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"go2": {
"command": "npx",
"args": ["-y", "go2-mcp-server@latest", "--api-key", "go2_xxx"],
"env": {
"GO2_AGENT_ID": "claude-desktop",
"GO2_AGENT_RUN_ID": "set-per-conversation"
}
}
}
}
claude mcp add go2 npx -y go2-mcp-server@latest --api-key "$GO2_API_KEY"
~/.cursor/mcp.json:
{
"mcpServers": {
"go2": {
"command": "npx",
"args": ["-y", "go2-mcp-server@latest"],
"env": { "GO2_API_KEY": "go2_xxx" }
}
}
}
Add the same stdio entry to ~/.codeium/windsurf/mcp_config.json.
Add https://mcp.go2.gg/mcp as a custom remote MCP server. OAuth 2.1 sign-in handles authentication.
Flags (preferred for command-style installs) and env vars (preferred for stdio in apps):
| Flag | Env var | Purpose |
|---|---|---|
--api-key | GO2_API_KEY | API key from https://go2.gg/dashboard/developer |
--api-url | GO2_API_URL | Override API base. Default https://api.go2.gg. |
--agent-id | GO2_AGENT_ID | Stable agent identifier (claude-code, cursor, ...) |
--agent-run-id | GO2_AGENT_RUN_ID | Per-conversation / per-task run id. Generate at run start. |
--agent-actor-id | GO2_AGENT_ACTOR_ID | Optional: end-user / persona id the agent is acting on behalf of. |
Per-call overrides on every tool also take precedence over env vars.
| Tool | What it does |
|---|---|
track_agent_link | Create a short link stamped with the current run context. |
get_run_attribution | Stream of clicks for a run / agent / link. |
list_agent_runs | Distinct (agent_id, agent_run_id) with click counts and timestamps. |
| Tool | What it does |
|---|---|
create_revocable_link | Single-use link that 410s after one click. |
create_expiring_link | TTL in minutes (default 60, max 30 days). |
revoke_run_links | Archive every link with a given agent_run_id. |
| Tool | What it does |
|---|---|
create_link | Create a short link. |
list_links | Paginated list of links. |
get_link | Fetch a link by id. |
update_link | Update destination/slug/etc. |
delete_link | Archive a link. |
bulk_create_links | Create many links in one call. |
get_analytics | Per-link click analytics rollup. |
| Tool | What it does |
|---|---|
search_docs | Search Go2 docs. |
get_doc | Fetch a doc by slug. |
list_docs | List doc pages, optionally by section. |
The server exposes two starter slash commands:
/go2:track-this-run — "from now on wrap every URL in a Go2 tracked link"/go2:summarize-attribution — "report on clicks for this run"agentToolCallId per call for the tightest resolution.UUIDs > timestamps so you never collide across parallel runs.
AGPL-3.0. Commercial license available — contact hello@go2.gg.
FAQs
MCP server for Go2 — short links your AI agent can call. Create branded URLs, track every click, query per-run agent attribution. Works in Claude Code, Claude Desktop, Cursor, Windsurf, Codex.
We found that go2-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.