
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
hrevn-mcp-server
Advanced tools
Minimal MCP server for HREVN, backed by the live managed runtime at https://api.hrevn.com.
For Anthropic and later Codex, MCP is the cleanest way to expose HREVN as real tools rather than only as local helper scripts. This server stays thin on purpose:
baseline_checkprofile_validategenerate_bundleverify_bundleexport HREVN_API_BASE_URL="https://api.hrevn.com"
export HREVN_API_KEY="replace-me"
cd hrevn-mcp-server
pip install -e .
If you install into a virtual environment, make sure the same virtual
environment is active when you launch Claude Code. Otherwise hrevn-mcp-server
may not be on the PATH Claude Code uses.
hrevn-mcp-server
The server uses MCP stdio transport.
hrevn-mcp-server --version
hrevn-mcp-server --list-tools
hrevn-mcp-server --self-test
The self-test runs a live baseline_check against the configured HREVN managed API.
If hrevn-mcp-server is not found, use the absolute executable path from the
active environment, for example:
which hrevn-mcp-server
and place that path in your Claude Code MCP config instead of the bare command.
See:
docs/CLAUDE_CODE_MCP_CONFIG.mdexamples/baseline_check_payload.jsonserver.jsonOnce Claude Code has this MCP server configured, ask it to call:
baseline_checkwith the payload in:
examples/baseline_check_payload.jsonThat should return a real BaselineResult from the live HREVN managed API.
This server must not reimplement HREVN truth locally. It should only expose stable MCP tools that call the managed API.
This repo includes:
server.jsonas a machine-readable manifest describing the server, transport, environment, and exposed tools for registry and catalog use.
This is a minimal first MCP server aimed at Anthropic-first testing. It is intentionally thin, real, and compatible with the live managed API path already in production.
FAQs
Minimal MCP server for HREVN tools backed by the live managed API.
We found that hrevn-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.