
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
vocabit-mcp
Advanced tools
MCP server for Vocabit — let an AI assistant build flashcard sets inside a real language-learning app and read back how the learner actually did.
An MCP server for Vocabit, a flashcard app. It lets an AI assistant write a study set into a real app on a real phone, and then read back how the learner actually did with it.
Most MCP servers read from an API. This one closes a loop:
flowchart LR
A["Assistant<br/>teaches a topic"] --> B["create_study_set"]
B --> C["Set appears in the<br/>Vocabit app"]
C --> D["Learner works<br/>through it"]
D --> E["get_set_results"]
E -->|weak cards| A
The interesting tool is not create_study_set — anything can generate flashcards.
It is get_set_results: which cards the learner marked hard, which they never reached,
how many reviews each one took. The next set is built out of that, not out of a guess.
No backend, no account, no API key:
npx -y vocabit-mcp --demo
Demo mode runs the same server against an in-memory Vocabit with two seeded sets. Create a set, ask for results, and a deterministic stand-in learner will have worked through it — flagged in the response as simulated, so it is never mistaken for real data.
To poke at it with a UI:
npx @modelcontextprotocol/inspector npx -y vocabit-mcp --demo
Listed in the MCP Registry as io.github.JohnBilousov/vocabit-mcp, so clients that read the registry can find it on their own.
claude mcp add vocabit -- npx -y vocabit-mcp
{
"mcpServers": {
"vocabit": {
"command": "npx",
"args": ["-y", "vocabit-mcp"],
"env": {
"VOCABIT_BASE_URL": "https://your-vocabit-backend.example.com",
"VOCABIT_AGENT_KEY": "your-agent-key"
}
}
}
}
Drop the env block to run in demo mode.
| Tool | What it does |
|---|---|
vocabit_health | Check the connection and which mode the server is in. |
create_study_set | Publish a set to the learner's app. Returns a deep link that opens it on the device. |
list_study_sets | Recent sets, newest first, each with a progress summary. |
get_study_set | Full contents of one set, plus the topic and notes the assistant attached. |
get_set_results | The feedback half. Per-card status, weakCards, untouchedCards, due cards. |
update_study_set | Retitle, retag, or append cards — typically the follow-up after reading results. |
notify_learner | Telegram ping that a set is waiting. |
delete_study_set | Remove a set from the app. Study history is kept. |
Also exposed: the vocabit://set/{setId} resource (a set as JSON, listable) and a
study-session prompt that walks the whole loop.
Progress comes from the app's spaced-repetition engine, not from the assistant:
| Status | Meaning |
|---|---|
new | Never reviewed. |
struggling | Learner marked it hard. |
learning | Marked good. |
mastered | Marked easy. |
A set reports completed: true once no card is left in new.
Point the server at a Vocabit backend that has the agent API enabled:
export VOCABIT_BASE_URL=https://your-vocabit-backend.example.com
export VOCABIT_AGENT_KEY=... # must match one of AGENT_API_KEYS on the backend
npx -y vocabit-mcp
| Variable | Purpose |
|---|---|
VOCABIT_BASE_URL | Backend base URL. |
VOCABIT_AGENT_KEY | Sent as X-Agent-Key. |
VOCABIT_USER_ID | Firebase UID of the learner. Optional; the backend has a default. |
VOCABIT_TERM_LANGUAGE / VOCABIT_DEFINITION_LANGUAGE | Defaults for new sets, e.g. de / en. |
VOCABIT_TELEGRAM_ID | Recipient for notify_learner. |
VOCABIT_TIMEOUT_MS | Request timeout, default 20000. |
VOCABIT_DEMO | 1 forces demo mode. |
Set neither URL nor key and the server starts in demo mode. Set exactly one and it refuses to start — half a configuration is a mistake, not a hint.
Demo mode is a first-class client, not a stub. HttpVocabitClient and
DemoVocabitClient implement the same VocabitClient interface, so no tool has a
branch for "are we pretending?". A reviewer can run the server before they have
credentials, and the test suite exercises the real tool surface over a real MCP
transport rather than mocking the SDK.
Errors are recoverable, not fatal. A failed call comes back as isError with the
backend's own message plus a hint aimed at the model — 404 says "call
list_study_sets to see which sets exist", 401 says "or run with VOCABIT_DEMO=1".
Mutually exclusive arguments are rejected with an explanation instead of a guess.
Output schemas stay loose on the edges. Identifying fields are required; everything else is optional, so a backend that grows a field does not turn a working tool into a validation error.
Annotations are honest. delete_study_set is marked destructiveHint, the read
tools readOnlyHint. notify_learner messages a real person, and its description says
to use it sparingly.
git clone https://github.com/JohnBilousov/vocabit-mcp && cd vocabit-mcp
npm install
npm run build
npm test # tool surface + full loop, plus the HTTP client against a mocked fetch
npm run lint # eslint
npm run format # prettier --write
npm run inspect # demo mode in the MCP Inspector
CI runs typecheck, lint, format:check, test, and build on every push and pull request.
src/
index.ts CLI entry, stdio transport
config.ts env → Config, demo-mode resolution
server.ts tool / resource / prompt registration
schemas.ts zod input and output shapes
format.ts human-readable summaries next to structuredContent
client/
types.ts wire types + VocabitClient contract
http.ts live backend
mock.ts in-memory backend for demo mode
test/
server.test.ts tool surface + full loop — over an in-memory MCP transport
client/
http.test.ts query encoding, error-body parsing, timeouts — against a mocked fetch
Publishing uses npm's trusted publishing (OIDC) —
no NPM_TOKEN secret, nothing that can leak or expire. One-time setup on npmjs.com, under the
package's Settings → Trusted publishing → GitHub Actions: organization JohnBilousov, this
repository, workflow filename publish.yml.
To cut a release: bump the version in package.json, server.json, and VERSION in
src/server.ts together (a test asserts they can't drift), commit, push, then publish a GitHub
Release with a matching vX.Y.Z tag. That triggers
.github/workflows/publish.yml, which runs the test suite and
publishes to npm with provenance — the
package page shows a verified link back to this exact commit and workflow run, not just a name on
the registry.
MIT © Ivan Bilousov
FAQs
MCP server for Vocabit — let an AI assistant build flashcard sets inside a real language-learning app and read back how the learner actually did.
The npm package vocabit-mcp receives a total of 598 weekly downloads. As such, vocabit-mcp popularity was classified as not popular.
We found that vocabit-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.