
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
negirau-mcp
Advanced tools
MCP server for the Negirau public API — registers its tools dynamically from the live OpenAPI spec
MCP (Model Context Protocol) server for the Negirau public API.
Self-updating by construction: at startup it fetches https://api.negirau.com/v1/openapi.json and registers one tool per operation from the spec's x-mcp-tool-name / x-agent-description annotations.
New API operations appear as tools without a new release of this package.
The server is a standard stdio MCP server, published to npm as negirau-mcp and listed in the vendor-neutral MCP Registry as io.github.sincekmori/negirau.
The portable definition — every MCP client understands this shape in its own config file:
{
"mcpServers": {
"negirau": {
"command": "npx",
"args": ["-y", "negirau-mcp"]
}
}
}
To install into all detected agents at once with the cross-agent installer:
npx add-mcp negirau-mcp
Per-client one-liners, if you prefer a specific CLI:
codex mcp add negirau -- npx -y negirau-mcp
claude mcp add negirau -- npx -y negirau-mcp
(Gemini CLI and others: add the mcpServers block above to the client's settings file. bunx works in place of npx -y.)
Environment:
NEGIRAU_BASE_URL — override the API base (default https://api.negirau.com/v1).GETs; the API is anonymous and CORS-open, so the full surface is safe to expose.Apache-2.0. This package lives in the negirau monorepo, whose server code is separately licensed under AGPL-3.0-only.
FAQs
MCP server for the Negirau public API — registers its tools dynamically from the live OpenAPI spec
We found that negirau-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.