
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
hovercode-mcp
Advanced tools
MCP server for Hovercode: create and manage QR codes, short links, landing pages, and forms from Claude, Cursor, or any MCP client.
Manage your Hovercode QR codes, short links, landing pages, and forms from Claude, ChatGPT, Cursor, or any Model Context Protocol client — by chatting.
https://hovercode.com/mcp/ (Streamable HTTP, hosted — nothing to run)npx hovercode-mcp) for clients that can't connect to remote servers directly. It wraps mcp-remote and points it at the hosted endpoint, so tools and behaviour are identical.Anything the assistant creates lands in your Hovercode dashboard like any other code, and every create tool returns both a shareable link and the rendered QR image.
Add a custom connector with the URL https://hovercode.com/mcp/ and approve access. You log in to Hovercode as normal; there is no token to copy.
claude mcp add --transport http hovercode https://hovercode.com/mcp/ \
--header "Authorization: Bearer YOUR_API_TOKEN"
Your API token is on https://hovercode.com/api/.
Remote (preferred):
{
"mcpServers": {
"hovercode": {
"type": "http",
"url": "https://hovercode.com/mcp/",
"headers": { "Authorization": "Bearer YOUR_API_TOKEN" }
}
}
}
Via this package (for clients that only support stdio servers):
{
"mcpServers": {
"hovercode": {
"command": "npx",
"args": ["-y", "hovercode-mcp"]
}
}
}
With no token set, the bridge opens a browser for the Hovercode OAuth login the first time. To skip the browser, set HOVERCODE_API_TOKEN:
{
"mcpServers": {
"hovercode": {
"command": "npx",
"args": ["-y", "hovercode-mcp"],
"env": { "HOVERCODE_API_TOKEN": "YOUR_API_TOKEN" }
}
}
}
| Area | Tools |
|---|---|
| Workspaces | list_workspaces, set_workspace |
| QR codes | create_qr_code (URL, text, or vCard contact), create_qr_codes_bulk, get_qr_code, list_qr_codes (filter by folder, include tags + scan counts), update_qr_code (retarget, restyle in place, rename, move to folder, add/remove tags), delete_qr_code, download_qr (print-ready PNG + SVG), get_qr_activity, list_templates (with design details) |
| Organisation | list_folders, create_folder, update_folder (rename / move), delete_folder (codes become unfiled), list_tags |
| PDF codes | create_pdf_qr — host a PDF (URL or base64) behind a dynamic QR + short link; swap it later without reprinting |
| Analytics | get_analytics — totals, by-day trend, top countries/cities/OS/browsers for one code or a whole workspace |
| Short links | create_short_link, get_short_link, list_short_links, update_short_link, delete_short_link, get_short_link_activity |
| Landing pages | build_page (rich block-based page: header, links, text, image, button, video, gallery, FAQ, countdown, socials, form, …), list_block_types, create_page (simple link-in-bio), get_page, list_pages, update_page, delete_page |
| Forms | create_form, update_form, list_forms, get_form, get_form_responses |
The server is available on every Hovercode plan and respects the same limits as the dashboard and REST API. Static codes are unlimited; the free plan includes a small number of active dynamic (editable, tracked) codes and paid plans raise that limit.
https://hovercode.com/.well-known/mcp/server-card.jsonhttps://hovercode.com/.well-known/oauth-protected-resource/mcphttps://hovercode.com/mcp/docsllms.txt: https://hovercode.com/llms.txt| Variable | Purpose |
|---|---|
HOVERCODE_API_TOKEN | Optional. Use your API token instead of the OAuth browser flow. |
HOVERCODE_MCP_URL | Optional. Override the endpoint (default https://hovercode.com/mcp/). |
Extra CLI arguments are passed through to mcp-remote.
Questions or bugs: https://hovercode.com/contact/ or open an issue on this repo.
MIT © Hovercode Ltd
FAQs
MCP server for Hovercode: create and manage QR codes, short links, landing pages, and forms from Claude, Cursor, or any MCP client.
The npm package hovercode-mcp receives a total of 194 weekly downloads. As such, hovercode-mcp popularity was classified as not popular.
We found that hovercode-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.