
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
MCPAnvil is a comprehensive directory of Model Context Protocol (MCP) servers, optimized for AI agents and developers. Live at mcpanvil.com.
GitHub Sources → Redis Queue → Workers → SQLite → Static Site → CloudFront CDN
npm install
cp .env.example .env
# Add your GitHub token
docker-compose up -d
sqlite3 database/mcpanvil.db < database/schema.sql
node database/init-sources.js
./scripts/start-crawler.sh
# Monitor with: node scripts/monitor-queues.js
npm run build
npm run deploy aws mcpanvil-site
AI agents can access:
/api/mcps.json - Complete MCP database/api/categories.json - Category statistics/api/by-tool/{tool}.json - MCPs by tool (claudeDesktop, vscode, etc.)// Fetch all MCPs
fetch('https://mcpanvil.com/api/mcps.json')
.then(r => r.json())
.then(mcps => console.log(`Found ${mcps.length} MCPs`));
// Get categories
fetch('https://mcpanvil.com/api/categories.json')
.then(r => r.json())
.then(cats => console.log('Categories:', cats));
{
"id": "github-owner-repo",
"name": "mcp-name",
"description": "What this MCP does",
"repository": "https://github.com/owner/repo",
"stars": 123,
"categories": ["ai", "dev-tools"],
"installation": {
"claudeDesktop": { /* config */ },
"vscode": { /* config */ },
"npx": "npx -y mcp-name"
},
"last_crawled": "2025-07-25T19:09:23Z"
}
mcp-site/
├── crawler/ # Queue-based crawler system
│ ├── producer.js # Discovers MCPs from sources
│ ├── worker.js # Validates and fetches data
│ └── consumer.js # Writes to database
├── database/ # SQLite database
│ ├── schema.sql # Database structure
│ └── db.js # Database abstraction
├── scripts/ # Build and deploy scripts
├── public/ # Static site assets
└── docs/ # Detailed documentation
Prevents database corruption with single-writer pattern:
27 categories detected via keywords:
database/sources tablecrawler/consumer.jscrawler/worker.jsMIT
FAQs
MCPAnvil - Where AI agents forge connections with Model Context Protocol servers
The npm package mcpanvil receives a total of 0 weekly downloads. As such, mcpanvil popularity was classified as not popular.
We found that mcpanvil demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.