
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
mup-mcp-server
Advanced tools
MCP server that turns HTML MUP panels into interactive tools for LLMs — render UI, call functions, and pipe data between panels
MCP server that turns HTML MUP panels into interactive tools for LLMs — render UI, call functions, and pipe data between panels.
npm install -g mup-mcp-server
Or use directly:
npx mup-mcp-server --mups-dir ./my-mups
claude mcp add --transport stdio --scope user mup -- npx mup-mcp-server
Optionally point to a folder of MUP files:
claude mcp add --transport stdio --scope user mup -- npx mup-mcp-server --mups-dir /path/to/mups
Add to claude_desktop_config.json:
{
"mcpServers": {
"mup": {
"command": "npx",
"args": ["mup-mcp-server"]
}
}
}
--mups-dir <dir> Load all .html MUP files from a directory
--port <port> UI panel port (default: 3200)
--no-open Don't auto-open the browser
A MUP is an interactive UI component that lives inside an LLM chat. It's a single .html file with a manifest and callable functions — no build step, no framework.
The user operates it by clicking buttons; the LLM operates it through function calls. Both sides see each other's actions in real time.
Includes a built-in Chat widget. Load your own MUP .html files via --mups-dir, or use the ones in the mups/ folder (Slides, Voice, Progress).
MIT
FAQs
MCP server that turns HTML MUP panels into interactive tools for LLMs — render UI, call functions, and pipe data between panels
The npm package mup-mcp-server receives a total of 37 weekly downloads. As such, mup-mcp-server popularity was classified as not popular.
We found that mup-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.