
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
mcp-docs-tool
Advanced tools
An MCP (Model Context Protocol) tool for Cursor that assists with coding by searching relevant documentation for different programming languages.
go doc)cargo doc or rustup doc)typedoc or npm package lookups)The easiest way to install this tool is directly from npm:
npm install -g mcp-docs-tool
Then, add it to your Cursor MCP configuration (see Usage section below).
Clone this repository:
git clone <repository-url>
cd mcp-docs-tool
Install dependencies:
npm install
Build the project:
npm run build
Link the package globally (optional):
npm link
Create a .cursor directory in your project root:
mkdir -p .cursor
Create a mcp.json file in the .cursor directory with the following content:
{
"mcpServers": {
"documentation-search": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-docs-tool@latest"
],
"env": {}
}
}
}
Create a .cursor directory in your home directory (if it doesn't exist):
mkdir -p ~/.cursor
Create or edit the mcp.json file in the ~/.cursor directory and add:
{
"mcpServers": {
"documentation-search": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-docs-tool@latest"
],
"env": {}
}
}
}
The tool will now be available in all Cursor workspaces.
In Cursor's chat, you can ask the agent to use the documentation search tool:
If you want to publish this package to npm:
Make sure you have an npm account and are logged in:
npm login
Update the version in package.json if needed
Publish the package:
npm publish
To test the MCP server locally:
node test.js
This will send test requests to the MCP server and display the responses.
ISC
FAQs
MCP Documentation Tool for Cursor
We found that mcp-docs-tool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.