
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
The Universal MCP Server for Manus AI enables you to create AI tasks, manage webhooks, and integrate Manus workflows into any MCP-compatible client. Designed for prompt-first usage with full support for attachments, connectors, and real-time notifications.
MANUS_MCP_API_KEY in your environmentcd /path/to/manus-mcp
npm i
npm run build
Use this one-liner (replace with your real API key):
claude mcp add "Manus MCP" -s user -e MANUS_MCP_API_KEY="your-api-key-here" -- npx manus-mcp
To remove:
claude mcp remove "Manus MCP"
Create .cursor/mcp.json in your client (do not commit it here):
{
"mcpServers": {
"manus-mcp": {
"command": "npx",
"args": ["manus-mcp"],
"env": { "MANUS_MCP_API_KEY": "your-api-key-here" },
"autoStart": true
}
}
}
Note: This repository does not include .cursor/mcp.json. Configure Cursor via the UI or manually create the file in your client workspace.
Install via URI or CLI:
code --add-mcp '{"name":"manus-mcp","command":"npx","args":["manus-mcp"],"env":{"MANUS_MCP_API_KEY":"your-api-key-here"}}'
Or add to your VS Code settings JSON:
{
"mcp.servers": {
"manus-mcp": {
"command": "npx",
"args": ["manus-mcp"],
"env": { "MANUS_MCP_API_KEY": "your-api-key-here" }
}
}
}
Same as VS Code, but use code-insiders command:
code-insiders --add-mcp '{"name":"manus-mcp","command":"npx","args":["manus-mcp"],"env":{"MANUS_MCP_API_KEY":"your-api-key-here"}}'
Add to your Claude Desktop configuration file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"manus-mcp": {
"command": "npx",
"args": ["manus-mcp"],
"env": { "MANUS_MCP_API_KEY": "your-api-key-here" }
}
}
}
In LM Studio's MCP settings:
npx["manus-mcp"]MANUS_MCP_API_KEY=your-api-key-hereAdd to your Goose configuration:
npxmanus-mcpMANUS_MCP_API_KEY=your-api-key-hereExample ~/.config/opencode/opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"manus-mcp": {
"type": "local",
"command": ["npx", "manus-mcp"],
"enabled": true,
"env": { "MANUS_MCP_API_KEY": "your-api-key-here" }
}
}
}
Add a new MCP in Qodo Gen and paste the standard JSON config:
{
"command": "npx",
"args": ["manus-mcp"],
"env": { "MANUS_MCP_API_KEY": "your-api-key-here" }
}
Follow the Windsurf MCP integration guide and reuse the standard config:
{
"manus-mcp": {
"command": "npx",
"args": ["manus-mcp"],
"env": { "MANUS_MCP_API_KEY": "your-api-key-here" }
}
}
Add the following to your Codex TOML configuration.
Example (Serena reference):
[mcp_servers.serena]
command = "uvx"
args = ["--from", "git+https://github.com/oraios/serena", "serena", "start-mcp-server", "--context", "codex"]
This server (minimal):
[mcp_servers.manus-mcp]
command = "npx"
args = ["manus-mcp"]
# Optional environment variables:
# MANUS_MCP_API_KEY = "your-api-key-here"
# MCP_NAME = "manus-mcp"
https://api.manus.ai/v1)manus-mcp)create_taskCreate a new AI task in Manus with custom parameters and optional attachments.
Inputs:
{
"prompt": "string (required) - The task prompt or instruction for the AI",
"mode": "string (required) - 'speed' or 'quality'",
"attachments": "array (optional) - List of attachment objects { filename, url, mime_type, size_bytes }",
"connectors": "array (optional) - List of connector IDs (e.g., ['gmail', 'notion'])",
"hide_in_task_list": "boolean (optional) - Hide from webapp task list (default: false)",
"create_shareable_link": "boolean (optional) - Generate a public shareable link (default: false)"
}
Outputs:
{
"task_id": "string - Unique task identifier",
"task_title": "string - Generated task title",
"task_url": "string - Direct link to the task",
"shareURL": "string (optional) - Public shareable link if requested"
}
create_webhookRegister a new webhook to receive real-time notifications from Manus.
Inputs:
{
"url": "string (required) - Webhook endpoint URL",
"events": "array (optional) - List of event types to subscribe to"
}
Outputs: Webhook registration details including webhook ID and configuration.
delete_webhookRemove a previously registered webhook by its ID.
Inputs:
{
"webhook_id": "string (required) - The ID of the webhook to delete"
}
Outputs: Success confirmation or error details.
Create a task in speed mode:
{
"tool": "create_task",
"arguments": {
"prompt": "Analyze the quarterly sales data and generate a summary report with key insights",
"mode": "speed",
"create_shareable_link": true
}
}
Create a task with attachments:
{
"tool": "create_task",
"arguments": {
"prompt": "Extract key action items from this meeting transcript",
"mode": "quality",
"attachments": [
{
"filename": "meeting-notes.pdf",
"url": "https://example.com/files/meeting-notes.pdf",
"mime_type": "application/pdf",
"size_bytes": 245632
}
],
"connectors": ["gmail", "notion"]
}
}
MANUS_MCP_API_KEY is correctly set in your environmentcurl -H "API_KEY: your-key" https://api.manus.ai/v1/tasks
node -vrm -rf buildrm -rf node_modules && npm inpm run buildnpx . or node build/index.jsls -la build/index.jsnpm pack --dry-runnpm pack && tar -xzf manus-mcp-*.tgz && cat package/package.jsonAlways use CANONICAL_ID (manus-mcp) for identifiers and keys. Use CANONICAL_DISPLAY (Manus MCP) only for UI labels. Do not mix legacy keys after registration.
| Context | Value |
|---|---|
| npm package name | manus-mcp |
| Binary name | manus-mcp |
| MCP server name (SDK metadata) | manus-mcp |
| Env default MCP_NAME | manus-mcp |
| Client registry key | manus-mcp |
| UI label | Manus MCP |
manus-mcp only.mcp.json or client registries only use manus-mcp for keys.cursor/mcp.json✅ Correct:
{
"mcpServers": {
"manus-mcp": {
"command": "npx",
"args": ["manus-mcp"]
}
}
}
❌ Incorrect:
{
"mcpServers": {
"Manus": { // Wrong: will conflict with "manus-mcp"
"command": "npx",
"args": ["manus-mcp"]
}
}
}
MIT
FAQs
MCP server for Manus API - Create AI tasks and manage webhooks
The npm package manus-mcp receives a total of 44 weekly downloads. As such, manus-mcp popularity was classified as not popular.
We found that manus-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.