
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
woody-mcp
Advanced tools
MCP server for Woody, an AI firearms expert with verified knowledge base and legal engine
mcp-name: io.github.Gunsmith-Academy/woody-mcp
MCP server for Woody, an AI firearms expert with a verified knowledge base, jurisdiction-specific legal engine, and multi-agent specialist routing.
Add Woody as a native tool in Claude Desktop, Claude Code, Cursor, Windsurf, or any MCP-compatible client.
pip install woody-mcp
Or with uvx (no install needed):
uvx woody-mcp
Email gsa@gunsmith.academy to request a wdy_ API key.
Tiers:
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"woody": {
"command": "woody-mcp",
"env": {
"WOODY_API_KEY": "wdy_your_key_here"
}
}
}
}
Restart Claude Desktop. Woody's tools will appear automatically.
claude mcp add woody -- woody-mcp
Then set your key in your shell environment:
export WOODY_API_KEY=wdy_your_key_here
ask_woodyAsk Woody any firearms question. Returns an expert answer with citations and legal disclaimers where applicable.
question: str — The firearms question (max 2000 chars)
state: str — US state code for legal questions (e.g. "TX")
user_tier: str — matches your API key tier: "free" (kb_only key),
"operator" (standard key), or "patriot"/"armorer" (premium key)
search_knowledge_baseSearch Woody's verified KB directly. Pure vector retrieval, no AI inference, near-zero latency.
query: str — Search query
top_k: int — Number of results (1-10, default 3)
check_woody_statusCheck Woody's current capabilities and KB version. No API key required.
woody://capabilities — Full tool manifest with input schemaswoody://supported-calibers — List of calibers Woody can analyzeMIT for the MCP client. The Woody API is proprietary.
FAQs
MCP server for Woody, an AI firearms expert with verified knowledge base and legal engine
The pypi package woody-mcp receives a total of 30 weekly downloads. As such, woody-mcp popularity was classified as not popular.
We found that woody-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.