
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
pc-style-mcf-cli
Advanced tools
MCF (My Claude Flow) CLI - Streamlined Claude Code integration with profile management, project automation, and MCP server support
A comprehensive command-line interface for MCF (My Claude Flow) with Claude Code integration, profile management, and project automation.
mcf install
# Install globally via npm
npm install -g @pc-style/mcf-cli
# Or run directly with npx (no installation needed)
npx @pc-style/mcf-cli install
git clone https://github.com/pc-style/MCF.git
cd MCF/cli
npm install
npm link # Creates global symlink for development
# Install MCF globally
mcf install
# List available profiles
mcf config list
# Create a new profile
mcf config create my-workspace
# Run Claude with specific profile
mcf run --config my-workspace
# Check status
mcf status
# List all profiles
mcf config list
# Show profile details
mcf config show <profile-name>
# Create new profile
mcf config create <profile-name>
# Delete profile
mcf config delete <profile-name>
# Clone profile
mcf config clone <source-profile> <new-profile>
# Set default profile
mcf config set-default <profile-name>
# Edit profile interactively
mcf config edit <profile-name>
# Validate profile configuration
mcf config validate <profile-name>
# Run Claude with default profile
mcf run
# Run with specific profile
mcf run --config <profile-name>
# Run with dangerous skip (no permissions)
mcf run --config <profile-name> --dangerous-skip
# Pass arguments to Claude
mcf run --config <profile-name> -- --help
mcf run --config <profile-name> -- --version
mcf run --config <profile-name> -- /serena:status
# Non-interactive mode
mcf run --config <profile-name> --no-interactive
# Run in specific working directory
mcf run --config <profile-name> --working-dir /path/to/project
# List all projects
mcf project list
# Show project details
mcf project show <project-name>
# Create new project
mcf project create <project-name>
# Delete project
mcf project delete <project-name>
# Switch to project
mcf project switch <project-name>
# Show current project
mcf project current
# Discover projects in directory
mcf project discover
# Show project statistics
mcf project stats
# List MCP servers
mcf mcp list
# Show server details
mcf mcp show <server-name>
# Start MCP server
mcf mcp start <server-name>
# Stop MCP server
mcf mcp stop <server-name>
# Restart MCP server
mcf mcp restart <server-name>
# Check server status
mcf mcp status <server-name>
# Show server health
mcf mcp health <server-name>
# View server logs
mcf mcp logs <server-name>
# Install MCP server
mcf mcp install <server-name>
# Remove MCP server
mcf mcp remove <server-name>
# Configure server
mcf mcp config <server-name>
# MCF installation (legacy)
mcf install
# MCF setup (legacy)
mcf setup
# MCF status check
mcf status
# Template management (legacy)
mcf templates
mcf templates list
mcf templates info <template-name>
mcf templates init <template-name>
Profiles allow you to manage different Claude Code configurations:
{
"name": "work",
"config": {
"claude": {
"configDirectory": "/Users/username/work/.claude",
"model": "claude-3-5-sonnet-20241022",
"smallFastModel": "claude-3-5-haiku-20241022",
"flags": ["--dangerous-skip"],
"environment": {
"ANTHROPIC_BASE_URL": "https://api.anthropic.com",
"ANTHROPIC_AUTH_TOKEN": "your-token-here"
}
},
"mcp": {
"servers": ["serena", "filesystem"]
}
}
}
MCF CLI automatically sets these environment variables when running Claude:
CLAUDE_CONFIG_DIR
- Profile-specific Claude configuration directoryANTHROPIC_BASE_URL
- Anthropic API base URLANTHROPIC_AUTH_TOKEN
- Anthropic API tokenANTHROPIC_MODEL
- Claude model to useANTHROPIC_SMALL_FAST_MODEL
- Small fast model for quick tasksYou can run MCF CLI without installation using npx:
# Install MCF
npx @pc-style/mcf-cli install
# List profiles
npx @pc-style/mcf-cli config list
# Run Claude
npx @pc-style/mcf-cli run --config default
# Any other command
npx @pc-style/mcf-cli <command> [args...]
mcf install
mcf config create my-workspace
mcf config edit my-workspace
mcf run --config my-workspace
mcf project create my-project
mcf status
(anytime)This CLI tool is designed to work seamlessly with the existing MCF ecosystem:
mcf install
mcf run
mcf templates
mcf mcp
commandsThe CLI provides comprehensive error handling:
mcf run
commands)# Create profile with custom Claude config directory
mcf config create custom-profile
# Edit the profile to set CLAUDE_CONFIG_DIR
mcf config edit custom-profile
# The profile will automatically set:
# CLAUDE_CONFIG_DIR=/Users/username/.mcf/profiles/custom-profile/.claude
# Install Serena MCP server
mcf mcp install serena
# Start the server
mcf mcp start serena
# Check server health
mcf mcp health serena
# Use in Claude session
mcf run --config my-profile -- /serena:analyze
# Create multiple profiles
for profile in dev staging prod; do
mcf config create $profile
done
# Validate all profiles
mcf config list | xargs -I {} mcf config validate {}
"Command not found: mcf"
# Install globally
npm install -g @pc-style/mcf-cli
# Or use npx
npx @pc-style/mcf-cli <command>
"Profile not found"
# List available profiles
mcf config list
# Create new profile
mcf config create <profile-name>
"Claude execution failed"
# Check Claude installation
claude --version
# Validate profile
mcf config validate <profile-name>
Contributions welcome! Please see the main MCF repository for guidelines.
ISC - Same as MCF framework
FAQs
MCF (My Claude Flow) CLI - Streamlined Claude Code integration with profile management, project automation, and MCP server support
The npm package pc-style-mcf-cli receives a total of 5 weekly downloads. As such, pc-style-mcf-cli popularity was classified as not popular.
We found that pc-style-mcf-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.