
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
stylekit-mcp
Advanced tools
MCP server for StyleKit — search 148 design styles and pull tokens, recipes, and shadcn install commands from Claude, Cursor, or Windsurf
MCP server for StyleKit — search 148 design styles and pull design tokens, component recipes, and shadcn install commands directly from Claude, Cursor, or Windsurf.
Runs locally over stdio and serves everything offline from the bundled stylekit-core.
All tools are read-only.
| Tool | What it does |
|---|---|
stylekit_search_styles | Search styles by keyword and/or category |
stylekit_get_style | Full style profile: philosophy, palette, do/don't rules, quality/capability signals |
stylekit_get_style_tokens | Typed design tokens: border, shadow, typography, spacing, colors |
stylekit_get_component_recipe | Rendered component className + JSX (button/card/input) |
stylekit_get_shadcn_install | The npx shadcn add command for a style's theme |
The public beta is available from npm. Add the following to your MCP client config:
{
"mcpServers": {
"stylekit": {
"command": "npx",
"args": ["-y", "stylekit-mcp"]
}
}
}
claude_desktop_config.json or .mcp.json.cursor/mcp.jsonTo run a locally built copy instead, point your client at the absolute path:
{
"mcpServers": {
"stylekit": { "command": "node", "args": ["/abs/path/to/packages/mcp/dist/index.js"] }
}
}
In your editor's AI chat:
"Search StyleKit for a frosted glass style, then give me its button recipe and the shadcn install command."
The agent calls stylekit_search_styles → stylekit_get_component_recipe → stylekit_get_shadcn_install and hands back ready-to-use code.
pnpm --filter stylekit-mcp build # compile to dist/
node scripts/smoke.mjs # smoke-test all tools over stdio
MIT
FAQs
MCP server for StyleKit — search 148 design styles and pull tokens, recipes, and shadcn install commands from Claude, Cursor, or Windsurf
The npm package stylekit-mcp receives a total of 39 weekly downloads. As such, stylekit-mcp popularity was classified as not popular.
We found that stylekit-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.