A universal CLI client for MCP. mcpc supports persistent sessions, stdio/HTTP, OAuth 2.1, tasks, JSON output for code mode, proxy for AI sandboxes, x402, and more.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 5e2a8d1 · analyzer v20 · 5h ago
skills & prompt files 2
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 18
- fs apify-mcpc-5e2a8d1/src/bridge/index.ts :10
import { unlink } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/cli/commands/clean.ts :6
import { readdir, unlink, rm } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/cli/commands/help.ts :8
import { readFileSync } from 'node:fs'; - fs apify-mcpc-5e2a8d1/src/cli/commands/logs.ts :5
import { stat } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/auth/auth-page.ts :7
import { readFileSync } from 'fs'; - fs apify-mcpc-5e2a8d1/src/lib/auth/client-credentials.ts :17
import { readFile } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/auth/keychain.ts :13
import { readFile, writeFile } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/auth/profiles.ts :7
import { readFile, writeFile, unlink } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/cleanup.ts :5
import { readdir, unlink, stat } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/config.ts :6
import { readFileSync, statSync } from 'fs'; - fs apify-mcpc-5e2a8d1/src/lib/file-lock.ts :6
import { writeFile } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/file-logger.ts :6
import { createWriteStream, type WriteStream } from 'fs'; - fs apify-mcpc-5e2a8d1/src/lib/log-reader.ts :8
import { readdir, readFile, stat } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/resource-content.ts :10
import { stat, unlink, writeFile } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/schema-validator.ts :6
import { readFile } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/sessions.ts :7
import { readFile, writeFile, unlink } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/utils.ts :10
import { mkdir, access, constants, rename } from 'fs/promises'; - fs apify-mcpc-5e2a8d1/src/lib/wallets.ts :6
import { readFile, writeFile, unlink } from 'fs/promises';
shell / exec 4
- shell apify-mcpc-5e2a8d1/src/cli/commands/connect.ts :866
// arbitrary local commands via child_process.spawn(), so bulk-connect - shell apify-mcpc-5e2a8d1/src/lib/auth/oauth-flow.ts :281
const { execFile } = await import('child_process'); - shell apify-mcpc-5e2a8d1/src/lib/bridge-manager.ts :15
import { spawn, type ChildProcess } from 'child_process'; - shell apify-mcpc-5e2a8d1/src/lib/utils.ts :7
import { execFileSync } from 'child_process';
network 7
- net apify-mcpc-5e2a8d1/src/bridge/index.ts :9
import { createServer, type Server as NetServer, type Socket } from 'net'; - net apify-mcpc-5e2a8d1/src/bridge/proxy-server.ts :14
} from 'http'; - net apify-mcpc-5e2a8d1/src/cli/commands/connect.ts :10
import { createServer } from 'net'; - net apify-mcpc-5e2a8d1/src/core/transports.ts :128
// Custom fetch (e.g. x402 middleware) takes priority if provided. - net apify-mcpc-5e2a8d1/src/lib/auth/oauth-flow.ts :7
import { createServer, type Server, type IncomingMessage, type ServerResponse } from 'http'; - net apify-mcpc-5e2a8d1/src/lib/bridge-client.ts :18
import { connect, type Socket } from 'net'; - net apify-mcpc-5e2a8d1/src/lib/proxy.ts :4
* Node.js native fetch (powered by undici) does not respect HTTP_PROXY/HTTPS_PROXY
install hooks 1
- prepublishOnly apify-mcpc-5e2a8d1/package.json :51
if [ -z "$MCPC_RELEASE" ]; then echo '\n❌ Direct publish is not allowed.\n Please use: pnpm run release\n' && exit 1; fi
declared dependencies 29
- @inquirer/input@^5.1.2
- @inquirer/select@^5.2.1
- @modelcontextprotocol/sdk@^1.29.0
- @napi-rs/keyring@^1.3.0
- chalk@^5.6.2
- commander@^14.0.3
- ora@^9.4.0
- proper-lockfile@^4.1.2
- qrcode-terminal@^0.12.0
- undici@^7.28.0
- uuid@^14.0.0
- viem@^2.52.2
- @types/node@^25.9.3
- @types/proper-lockfile@^4.1.4
- @types/qrcode-terminal@^0.12.2
- @types/uuid@^11.0.0
- @typescript-eslint/eslint-plugin@8.61.1
- @typescript-eslint/parser@8.61.1
- @vitest/coverage-v8@4.1.9
- c8@^11.0.0
- doctoc@^2.5.0
- eslint@^8.57.1
- markdown-link-check@^3.14.2
- nyc@^18.0.0
- prettier@^3.8.4
- proxy-chain@^3.0.0
- tsx@^4.22.4
- typescript@^6.0.3
- vitest@4.1.9