
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
soulcraft-mcp
Advanced tools
Analyze any company's brand identity from your AI agent.
Soulcraft's identity analysis engine as an MCP server. Point it at a domain and get back a Soul Score, five dimension scores, a full soul.md identity document, and actionable recommendations -- in seconds, inside Claude or any MCP-compatible agent.
Built by Soulcraft. Get an API key at soulcraftagency.com/developers.
Two tools:
analyze_identity -- Full soul.md analysis for any domain. Returns an overall Soul Score (0-100), dimension scores across five axes, an executive summary, a proposed tagline, and 10 ranked recommendations.
get_soul_file -- Returns a soul.md document formatted as markdown, ready to inject into a system prompt. Use this to load a company's voice and identity into context before writing copy, checking brand alignment, or generating content.
Analyze the identity of stripe.com
# Soul Analysis: Stripe (stripe.com)
Overall Soul Score: 84 / 100
Dimension Scores:
Identity Clarity: 91 / 100
Voice Consistency: 88 / 100
AI Readiness: 79 / 100
Positioning: 85 / 100
Content Signal: 77 / 100
## Summary
Stripe has one of the clearest identities in fintech...
Proposed tagline: "Infrastructure for the internet economy."
## Top Recommendations
1. [AI Readiness] Improve structured data...
npm install -g soulcraft-mcp
Or use directly with npx (no install needed -- see setup below).
Requires Node.js 18+.
Get a free key at soulcraftagency.com/developers. Keys start with sc_.
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"soul": {
"command": "npx",
"args": ["-y", "soulcraft-mcp"],
"env": {
"SOUL_API_KEY": "sc_your-key-here"
}
}
}
}
Restart Claude Desktop. A soul server will appear in the tools list.
Same config pattern -- command: npx, args: ["-y", "soulcraft-mcp"], env with your key.
analyze_identityFull identity analysis for a domain.
Inputs:
| Parameter | Type | Required | Description |
|---|---|---|---|
domain | string | Yes | Company domain, e.g. stripe.com |
company | string | No | Company name (inferred from domain if omitted) |
Returns: Soul Score, dimension scores, executive summary, proposed tagline, top 10 recommendations.
get_soul_fileSoul.md identity document for a domain, formatted for system prompt injection.
Inputs:
| Parameter | Type | Required | Description |
|---|---|---|---|
domain | string | Yes | Company domain, e.g. notion.so |
company | string | No | Company name (optional) |
Returns: Full soul.md markdown document including origin, voice, beliefs, competitive position, and vision.
Example use:
Get the soul file for notion.so and use it to write a blog post in their voice
| Variable | Required | Default | Description |
|---|---|---|---|
SOUL_API_KEY | Yes | -- | Your Soulcraft API key (sc_...) |
SOUL_API_URL | No | https://soulcraft-report-production.up.railway.app | Override for self-hosted deployments |
Every agent has a soul. We craft it.
FAQs
MCP server for Soulcraft identity analysis. Analyze any company's soul.
The npm package soulcraft-mcp receives a total of 34 weekly downloads. As such, soulcraft-mcp popularity was classified as not popular.
We found that soulcraft-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.