
Security News
Feross on Risky Business Weekly Podcast: npm’s Ongoing Supply Chain Attacks
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
message-mcp
Advanced tools
Desktop notifications, custom sounds, ntfy mobile notifications, email notifications, and API pushes reduce anxiety while waiting for AI tasks, allowing you to comfortably enjoy a cup of coffee.
🌐 Available in: 中文 | 한국어 | 日本語
When waiting for AI to complete tasks, do you wish you could handle other work simultaneously? Now you can confidently take care of other matters while AI executes long-running tasks.
Message MCP makes your AI collaboration more efficient!
🧑: Make a Tetris web game, notify when completed.
🤖: I'll start making the Tetris game
...
💬: Message MCP executed, message sent.
[!TIP]
- Allow MCP auto-execution in client settings.
- Add "notify when completed" prompts in user rules or rule files to avoid repetitive manual prompts.
Supports cloud installation via smithery.ai (e.g., SaaS services like Dify) and offers one-click local deployment. Since the Message MCP actually runs on smithery.ai’s cloud, desktop notifications are not yet supported. End-to-end encryption is applied throughout to ensure data security. Learn more
{
"mcpServers": {
"message-mcp": {
"command": "npx",
"args": ["-y", "message-mcp@latest"]
}
}
}
{
"mcpServers": {
"message-mcp": {
"command": "cmd",
"args": ["/c", "npx", "-y", "message-mcp@latest"]
}
}
}
{
"mcpServers": {
"message-mcp": {
"command": "npx",
"args": ["-y", "message-mcp@latest"],
"env": {
"DISABLE_DESKTOP": "true",
"SOUND_PATH": "/path/to/your/sound.mp3"
}
}
}
}
- Desktop notifications are enabled by default
- Default sound provided by zapsplat. If you don't like the default sound, you can download and configure from zapsplat.com.
Install App: App Store, Google Play, F-Droid
{
"mcpServers": {
"message-mcp": {
"command": "npx",
"args": ["-y", "message-mcp@latest"],
"env": {
"NTFY_TOPIC": "your-unique-topic"
}
}
}
}
{
"mcpServers": {
"message-mcp": {
"command": "npx",
"args": ["-y", "message-mcp@latest"],
"env": {
"SMTP_HOST": "smtp.gmail.com",
"SMTP_PORT": "587",
"SMTP_SECURE": "false",
"SMTP_USER": "user@gmail.com",
"SMTP_PASS": "your_password"
}
}
}
}
{
"mcpServers": {
"message-mcp": {
"command": "npx",
"args": ["-y", "message-mcp@latest"],
"env": {
"API_URL": "https://httpbin.org/post",
"API_METHOD": "POST", // POST, PUT, PATCH
"API_HEADERS": "{\"Authorization\": \"Bearer token\"}"
}
}
}
}
fetch(API_URL, {
method: API_METHOD,
headers: {
'Content-Type': 'application/json'
...JSON.parse(API_HEADERS)
},
body: JSON.stringify({
title: notifyTitle,
message: notifyMessage,
}),
})
Settings > Notifications & actions > Get notifications from apps and other senders → Enable
sudo apt install -y pulseaudio mpg123
sudo find / -type f -name "snoretoast-*.exe" 2>/dev/null
/path/to/.../node_modules/snoretoast-x64.exe
/path/to/.../node_modules/snoretoast-x86.exe
chmod +x /path/to/.../node_modules/snoretoast-*.exe
If this project is helpful to you, please give it a ⭐️ to support it and let more people see it!
FAQs
Desktop notifications, custom sounds, ntfy mobile notifications, email notifications, and API pushes reduce anxiety while waiting for AI tasks, allowing you to comfortably enjoy a cup of coffee.
We found that message-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.