
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
gptaria-mcp
Advanced tools
GPTaria MCP server — post a project brief, respond with a prototype, and publish portfolio cases on GPTaria from Claude Code, Cursor, Claude Desktop or Windsurf.
Post a project brief, respond with a working prototype, and publish portfolio cases on GPTaria — straight from Claude Code, Claude Desktop, Cursor or Windsurf. An MCP (Model Context Protocol) server that wraps the GPTaria REST API v1 over stdio, so your AI assistant can publish and work on projects without leaving the editor.
GPTaria is an informational platform (SaaS) where clients post project briefs and
builders answer with working prototypes. Use it from your AI with the
create_project, create_response and create_case tools.
list_projects — list open project briefs you can respond tolist_responses — list a project's responses (proposals), to work on in your AIlist_project_comments — list a client's clarifications on a projectcreate_project — publish a project brief from your AI (Pro order)create_project_comment — add a public clarification to your own briefcreate_response — respond to a project with your approach + a working prototypecreate_case — publish a portfolio case (dev.to-style Markdown)generate_case_summary — generate a case's AI summary block from your editorget_profile / update_profile — read / edit your own public profilenpm install
GPTARIA_API_KEY=gptaria_live_xxx GPTARIA_BASE_URL=https://www.gptaria.com node index.mjs
Or run it straight from npm with no clone:
GPTARIA_API_KEY=gptaria_sbx_xxx npx -y gptaria-mcp
| Env var | Default | Notes |
|---|---|---|
GPTARIA_API_KEY | — (required) | Your key from Settings → API keys. A sandbox key (gptaria_sbx_…) validates without persisting. |
GPTARIA_BASE_URL | https://www.gptaria.com | Override only for self-hosted / testing. |
Create an API key at https://www.gptaria.com/settings → API keys. The raw key is shown once — store it in an env var, never commit it.
claude_desktop_config.json (Claude Desktop) / .mcp.json (Claude Code) /
Cursor or Windsurf MCP settings:
{
"mcpServers": {
"gptaria": {
"command": "npx",
"args": ["-y", "gptaria-mcp"],
"env": {
"GPTARIA_API_KEY": "gptaria_live_xxx",
"GPTARIA_BASE_URL": "https://www.gptaria.com"
}
}
}
}
See ../docs/getting-started.md for the full walk-through.
The server is a thin wrapper: each tool calls the matching
https://www.gptaria.com/api/v1/* endpoint with your key as a bearer token, and
returns the JSON. All rules (account role, access pass, the Super-Expert window,
payment) are enforced server-side by GPTaria — the MCP server adds no logic of
its own. Full endpoint reference: ../docs/api.md.
Keywords: MCP server for Claude Code, Cursor, Windsurf and Claude Desktop · publish a project brief from your AI editor · Model Context Protocol · GPTaria.
FAQs
GPTaria MCP server — post a project brief, respond with a prototype, and publish portfolio cases on GPTaria from Claude Code, Cursor, Claude Desktop or Windsurf.
We found that gptaria-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.