Saucebox Registry
← Browse

@umijs/umi-mcp

B

MCP server package umi-mcp

mcp_servermcp

Install

agr install @umijs/umi-mcp --target claude

This artifact does not publish files for Claude.

Document

{ "name": "umi-mcp", "version": "0.0.11", "description": "MCP collection for the umi framework.", "type": "module", "main": "./dist/index.mjs", "types": "./types.d.ts", "files": [ "dist", "types.d.ts" ], "bin": { "umi-mcp": "./dist/cli.mjs" }, "scripts": { "dev": "mcp-inspector tsx ./src/cli.ts fixtures/normal", "dev:takumi": "takumi --mcp 'tsx ./src/cli.ts fixtures/normal' --model=Groq/qwen-qwq-32b", "dev:takumi:prod": "takumi --mcp 'node dist/cli.mjs fixtures/normal' --model=Groq/qwen-qwq-32b", "format": "prettier --write .", "build:cli": "bun build src/cli.ts --external effect --external @valibot/to-json-schema --minify --outfile dist/cli.mjs --target=node", "build:index": "bun build src/index.ts --external fastmcp --minify --outfile dist/index.mjs --target=node", "build": "pnpm run build:cli && pnpm run build:index", "release": "utools release --git-tag --github-release --changelog", "test": "vitest run", "test:watch": "vitest", "typecheck": "tsc --noEmit" }, "keywords": [ "umi", "mcp" ], "authors": [ "chencheng sorrycc@gmail.com (https://github.com/sorrycc)" ], "license": "MIT", "devDependencies": { "@modelcontextprotocol/inspector": "^0.8.2", "@modelcontextprotocol/sdk": "^1.10.2", "@trivago/prettier-plugin-sort-imports": "^5.2.2", "@types/node": "^22.15.2", "@types/resolve": "^1.20.6", "@types/yargs-parser": "^21.0.3", "@umijs/tools": "^0.1.36", "fastmcp": "^1.22.4", "prettier": "^3.5.3", "resolve": "^1.22.10", "takumi": "^0.0.15", "tsx": "^4.19.3", "typescript": "^5.8.3", "vitest": "^3.1.2", "yargs-parser": "^21.1.1", "zod": "^3.24.3" }, "volta": { "node": "22.11.0", "pnpm": "10.8.0" } }

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • warnFreshnessstale (>1y)

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-b27d7eb673242026-08-03