
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
An MCP server that gives an AI assistant (Claude and other MCP clients) a publish tool. The assistant can publish text or HTML to Snapy.host and get back a shareable link.
Versions before 1.1.0 no longer work. They publish without a credential, and the Snapy.host publish API no longer accepts that — for any file type.
Publishing anonymously was a contradiction in the product: the website has always made you verify an email address before your link goes live, while the API did not. It has been closed.
The key is free. Create one at snapy.host under API keys with a verified email address. There is no paid plan behind it — what a free account can publish is bounded by the one-live-link allowance, exactly as it is on the website.
Add this to your MCP client config (for example Claude Desktop), with your key:
{
"mcpServers": {
"snapy": {
"command": "npx",
"args": ["-y", "snapy-mcp"],
"env": { "SNAPY_API_KEY": "your key here" }
}
}
}
Or run it directly from this folder:
npm install
node index.js
The tool calls the Snapy.host publish API at https://api.snapy.host. Set SNAPY_API to
override the host, and SNAPY_API_KEY to supply your key (required).
Without a key the publish tool returns an error telling you to create one, rather than
passing a bare 401 back to the assistant.
content (required text/HTML), name (optional link name), filename (optional, default index.html). Returns the live link and a private analytics link.FAQs
MCP server to publish files and pages to Snapy.host and get a shareable link.
We found that snapy-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.