
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
Scaffold MCP servers in seconds. 3 battle-tested templates from real-world MCP development.
Scaffold MCP servers in seconds. Battle-tested templates from real-world development.
npx mcp-quick my-server
cd my-server
npm install
npm run dev
That's it. You have a working MCP server.
basic (default)Minimal MCP server with one example tool. Best for getting started.
npx mcp-quick my-server
apiAPI wrapper with HTTP fetching, timeout handling, and parallel requests. Based on webcheck-mcp (84+ weekly downloads).
npx mcp-quick my-api --template api
scraperPlaywright browser automation for JavaScript-rendered pages. Includes browser lifecycle management and screenshot support.
npx mcp-quick my-scraper --template scraper
Every template includes:
npm run build && npm publish and you're liveWe built 5 MCP servers and published them to npm. Every time we started a new one, we copied the same boilerplate: tsconfig, package.json, server init, tool registration pattern, error handling.
mcp-quick extracts those patterns so you don't repeat our mistakes.
mcp-quick | @modelcontextprotocol/create-server | |
|---|---|---|
| Templates | 3 (basic, api, scraper) | 1 (empty) |
| HTTP fetcher with timeout | Included | No |
| Playwright setup | Included | No |
| Error handling pattern | Built-in | Manual |
| Chinese docs | Yes | No |
| Based on production code | Yes (5 npm packages) | Starter only |
claude mcp add my-server -- npx my-server-mcp
Add to claude_desktop_config.json:
{
"mcpServers": {
"my-server": {
"command": "npx",
"args": ["my-server-mcp"]
}
}
}
Add .mcp.json to project root:
{
"mcpServers": {
"my-server": {
"command": "npx",
"args": ["my-server-mcp"]
}
}
}
MIT
FAQs
Scaffold MCP servers in seconds. 3 battle-tested templates from real-world MCP development.
We found that mcp-quick demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.