
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
orbitalmcp-cli
Advanced tools
Command-line tool for syncing your codebase with OrbitalMCP - the headless RAG service for AI agents.
npm install -g orbitalmcp-cli
Or use npx:
npx orbitalmcp-cli init
cd your-project
orbitalmcp init
This will:
.orbitalmcp.json configuration fileorbitalmcp sync
This uploads your code files to OrbitalMCP, where they're chunked and embedded for semantic search.
orbitalmcp query "How does authentication work?"
orbitalmcp initInitialize OrbitalMCP in the current directory.
orbitalmcp init [options]
Options:
-k, --api-key <key> Your OrbitalMCP API key
-p, --project <id> Project ID to sync with
-u, --url <url> API URL (default: https://www.orbitalmcp.com)
orbitalmcp syncSync your codebase with OrbitalMCP.
orbitalmcp sync [options]
Options:
-c, --clear Clear existing documents before syncing
-d, --dry-run Show what would be synced without uploading
orbitalmcp query <question>Query your project's knowledge base.
orbitalmcp query "your question" [options]
Options:
-l, --limit <number> Maximum results (default: 5)
orbitalmcp projectsList and manage your projects.
orbitalmcp projects [options]
Options:
-c, --create <name> Create a new project
-d, --delete <id> Delete a project
The .orbitalmcp.json file stores your configuration:
{
"apiKey": "orbital_xxx...",
"projectId": "uuid-of-your-project",
"apiUrl": "https://www.orbitalmcp.com",
"include": [
"**/*.ts",
"**/*.tsx",
"**/*.js",
"**/*.jsx",
"**/*.py",
"**/*.md"
],
"exclude": [
"**/node_modules/**",
"**/dist/**",
"**/.git/**"
]
}
include: Glob patterns for files to sync (default: common code files)exclude: Glob patterns for files to ignore (default: node_modules, dist, .git, etc.)The CLI also respects your .gitignore file.
⚠️ Important: Add .orbitalmcp.json to your .gitignore as it contains your API key.
echo ".orbitalmcp.json" >> .gitignore
cd my-typescript-app
orbitalmcp init
orbitalmcp sync
orbitalmcp query "How do I handle errors?" --limit 10
orbitalmcp projects --create "My New Project"
orbitalmcp sync --clear
orbitalmcp sync --dry-run
Once your codebase is synced, AI agents can query it via:
POST /v1/projects/{projectId}/query/sse?project={projectId}See the OrbitalMCP documentation for more details.
FAQs
CLI tool for syncing codebases with OrbitalMCP
We found that orbitalmcp-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.