
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
MCP server for Laya typed decisions (noul / choice / score): a warm model sidecar, token-budget preflight, and honest confidence. Node entry point for the Python package.
MCP server for Laya typed decisions —
noul (yes/no), choice, score — wrapped so it survives contact with a server.
English · 简体中文 · Español · Português · हिन्दी
npx -y laya-mcp --help
Registered as io.github.PerryLink/laya-mcp in the official MCP Registry.
This npm package is a launcher, not an implementation. Laya is a PyTorch model, so the server itself is Python. Installing this package gets you the Node entry point and nothing else; you also need the Python side:
pip install "laya-mcp[mcp]"
npx laya-mcpfinds that interpreter, hands stdio to it, and passes the MCP stream through untouched. It does not install anything for you — fetching torch (~2 GB) and a checkpoint (~650 MB) as a side effect of running a command is not something a launcher should do.
On Windows, python on PATH is often the Microsoft Store execution alias, which
is a stub: it cannot import anything, and it sits ahead of your real interpreter.
The launcher therefore reports what it tried rather than claiming the package is
missing. Point it at the right interpreter either way:
# name it outright
set LAYA_MCP_PYTHON=C:\path\to\python.exe # Windows
export LAYA_MCP_PYTHON=/path/to/python # macOS, Linux
# or just activate the virtualenv you installed into — VIRTUAL_ENV is honoured
LAYACORE_PYTHONis still read. 0.1.0 and 0.1.1 printed that name in the error message, and a launcher that stopped honouring the variable its own previous version told you to set would be worse than one carrying the alias.
Status: 0.1.5, work in progress. The Python core is implemented and covered by CI. The launcher itself is covered by ten checks over interpreter discovery, which is where it has been wrong before. Interfaces may move before 1.0.
Laya truncates things silently and reports none of it:
confidence is not accuracy. It is a normalised entropy, low whenever
probability is spread out even when the top option is right, and high on a
confident wrong answer.This package adds a preflight that reports what would be cut, structured errors that name the offending question, an honest confidence contract, and a health surface that admits a demotion.
laya-mcp serve # warm HTTP sidecar on 127.0.0.1:8787 (loads the model once)
laya-mcp mcp # MCP over stdio
laya-mcp doctor # what is installed, and whether the GPU really works
laya-mcp install # register with whichever agent harness you have
install handles the fact that there is no portable way to register an MCP
server: Claude Code (mcpServers), Codex ([mcp_servers.<name>]), opencode
(mcp, with an array command), OpenClaw (mcp.servers) and Hermes
(mcp_servers) each get the right shape written to the right file, merged and
backed up rather than overwritten. pi has no native MCP support and is reported
as unsupported.
Prefer serve plus --sidecar over hosting the model in each stdio process: a
harness spawns one server per session, and loading a 650 MB checkpoint per
session is the main reason a Python-backed MCP server feels slow.
Upstream's own numbers, repeated because an integration that implies otherwise is
lying to you: the base checkpoints are near chance zero-shot on typed
decisions (0.362 against a 0.461 majority-class baseline); score is the weakest
primitive (35% vs 70% in independent measurement); raw calibration error is 0.466
before temperature fitting; and one fixture run answered "A" on 46 of 50
multiple-choice items.
Calibration makes a probability honest; it cannot make a model right.
Apache-2.0. Laya is Apache-2.0 by Convai Innovations. This is an independent integration, not affiliated with or endorsed by that project.
FAQs
MCP server for Laya typed decisions (noul / choice / score): a warm model sidecar, token-budget preflight, and honest confidence. Node entry point for the Python package.
The npm package laya-mcp receives a total of 807 weekly downloads. As such, laya-mcp popularity was classified as not popular.
We found that laya-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.