
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
mcp-server-cantrip
Advanced tools
MCP (Model Context Protocol) server for Cantrip — the AI-powered GTM engine for solo founders.
This server lets any MCP-compatible agent (Claude, Cursor, etc.) interact with Cantrip's project management, gap analysis, and entity CRUD through the standard MCP tool protocol.
Agent (Claude, etc.) ── MCP protocol (stdio) ──> mcp-server-cantrip ── HTTPS POST ──> https://api.cantrip.ai
The MCP server is a thin translation layer. It converts MCP tool calls into {command, args, flags} JSON envelopes and POSTs them to the Cantrip API. Zero business logic — identical contract to the CLI and React UI.
npm install -g mcp-server-cantrip
Or run directly (used by the configs below):
npx -y mcp-server-cantrip
claude mcp add cantrip -e CANTRIP_API_KEY=your-api-key -- npx -y mcp-server-cantrip
This registers the server in ~/.claude.json with local scope. Verify with:
claude mcp list
Or check status inside Claude Code with the /mcp command.
If you prefer editing config directly, add to ~/.claude.json:
{
"mcpServers": {
"cantrip": {
"type": "stdio",
"command": "npx",
"args": ["-y", "mcp-server-cantrip"],
"env": {
"CANTRIP_API_KEY": "your-api-key"
}
}
}
}
Important: The
-yflag is required. Without it,npxprompts for install confirmation which hangs because stdio is consumed by the MCP protocol.
Add a .mcp.json file to your project root:
{
"mcpServers": {
"cantrip": {
"command": "npx",
"args": ["-y", "mcp-server-cantrip"],
"env": {
"CANTRIP_API_KEY": "${CANTRIP_API_KEY}"
}
}
}
}
This uses environment variable expansion so API keys stay out of version control. Each developer sets CANTRIP_API_KEY in their shell profile.
macOS: Edit ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: Edit %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"cantrip": {
"command": "npx",
"args": ["-y", "mcp-server-cantrip"],
"env": {
"CANTRIP_API_KEY": "your-api-key"
}
}
}
}
Add to .cursor/mcp.json in your project or ~/.cursor/mcp.json globally:
{
"mcpServers": {
"cantrip": {
"command": "npx",
"args": ["-y", "mcp-server-cantrip"],
"env": {
"CANTRIP_API_KEY": "your-api-key"
}
}
}
}
On native Windows (not WSL), wrap the command with cmd /c:
{
"mcpServers": {
"cantrip": {
"command": "cmd",
"args": ["/c", "npx", "-y", "mcp-server-cantrip"],
"env": {
"CANTRIP_API_KEY": "your-api-key"
}
}
}
}
.cantrip.json)Each project directory contains a .cantrip.json file that tells Cantrip which project to target:
{
"project": "my-saas"
}
This file is created automatically by cantrip_init (new project) or cantrip_connect (existing project). The agent manages it — you don't need to create it manually.
Multiple projects on the same machine? Each project directory gets its own .cantrip.json. The agent switches context by working in the right directory.
Server not found / no tools appear:
claude mcp list (Claude Code) or /mcp inside a session to check connection status.~/.claude.json or .mcp.json, not ~/.claude/mcp.json.Server hangs on startup:
-y in the npx args. Without it, npx waits for interactive confirmation that can never arrive over stdio."Cannot reach Cantrip API" errors:
CANTRIP_API_KEY is set in the env block of your MCP config.https://api.cantrip.ai is reachable from your network.Windows "Connection closed" errors:
"command": "cmd" with "args": ["/c", "npx", "-y", "mcp-server-cantrip"].| Tool | Description |
|---|---|
cantrip_connect | Connect workspace to a project (reads/writes .cantrip.json) |
cantrip_status | Check if the daemon is running |
cantrip_init | Create a new project and auto-connect |
| Tool | Description |
|---|---|
cantrip_snapshot | Project overview, drill into entity types |
cantrip_next | List gap-analysis opportunities |
cantrip_next_prompt | Generate a context-rich LLM prompt for an opportunity |
cantrip_next_run | Spawn a background agent for an opportunity |
cantrip_history | Query the audit trail |
| Tool | Description |
|---|---|
cantrip_review | List items pending review |
cantrip_review_accept | Accept an inferred entity |
cantrip_review_reject | Reject an inferred entity |
cantrip_review_resolve | Resolve an escalation |
cantrip_review_dismiss | Dismiss an escalation |
| Tool | Description |
|---|---|
cantrip_entity_list | List entities of a type |
cantrip_entity_show | Show entity detail |
cantrip_entity_add | Create a new entity |
cantrip_entity_edit | Edit an existing entity |
Supported entity types: icp, pain_point, value_prop, experiment, channel, competitor, contact
MIT
FAQs
MCP server for Cantrip — AI-powered GTM engine for solo founders
The npm package mcp-server-cantrip receives a total of 34 weekly downloads. As such, mcp-server-cantrip popularity was classified as not popular.
We found that mcp-server-cantrip demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.