Back to Home
antfu icon

nuxt-mcp-dev

Verified Safe

by antfu

Overview

This server provides development context and real-time insights from Vite/Nuxt applications to AI models via a Model Context Protocol (MCP) server.

Installation

Run Command
pnpm -C packages/nuxt-mcp-dev play

Environment Variables

  • DEBUG
  • PORT

Security Notes

The server is explicitly marked as 'Experimental. Not ready for production.' It involves running shell commands (`nuxi add`) which, if arguments (`template`, `name`) are not sufficiently sanitized by the underlying `nuxi` or `citty` CLI tools, could lead to command injection. Additionally, it modifies IDE/editor configuration files (`.cursor/mcp.json`, `.vscode/mcp.json`, `~/.codeium/windsurf/mcp_config.json`, `.mcp.json`) to register the MCP server URL. If an attacker could inject a malicious URL into these configurations, it could redirect the IDE/tool to an attacker-controlled server, leading to information leakage or false context injection for AI models. This is a supply chain risk if untrusted options are passed.

Similar Servers

Stats

Interest Score99
Security Score6
Cost ClassLow
Avg Tokens1000
Stars889
Forks47
Last Update2026-01-13

Tags

ViteNuxtDevelopmentAI ContextDeveloper Tooling