codeaudit-mcp 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +18 -7
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -13,9 +13,25 @@ simple typo of anything popular (e.g. `fastimagepro` → Pillow/imageio).
13
13
 
14
14
  ## Setup
15
15
 
16
- Add to your agent's MCP config, pointing at `npx codeaudit-mcp`:
16
+ **Claude Code** one command, no file editing:
17
17
 
18
- **Claude Code** (`.claude/mcp.json` or via `claude mcp add`):
18
+ ```bash
19
+ claude mcp add codeaudit -- npx -y codeaudit-mcp
20
+ ```
21
+
22
+ (Add `-e CODEAUDIT_TOKEN=your-token` before `--` if you have one. Use
23
+ `claude mcp add --scope project ...` instead to check the config into the
24
+ repo for your whole team rather than just your own machine.)
25
+
26
+ **Cursor** — click to install:
27
+
28
+ [![Add codeaudit-mcp to Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](cursor://anysphere.cursor-deeplink/mcp/install?name=codeaudit&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImNvZGVhdWRpdC1tY3AiXX0=)
29
+
30
+ Or manually via **Settings → MCP → Add new MCP server**, pointing the
31
+ command at `npx -y codeaudit-mcp`.
32
+
33
+ **Any other MCP-compatible client** (Cline, Windsurf, etc.) — add this to
34
+ whatever JSON config the client reads (e.g. Cline's `cline_mcp_settings.json`):
19
35
 
20
36
  ```json
21
37
  {
@@ -29,11 +45,6 @@ Add to your agent's MCP config, pointing at `npx codeaudit-mcp`:
29
45
  }
30
46
  ```
31
47
 
32
- **Cursor** (`.cursor/mcp.json`): identical shape to the above.
33
-
34
- **Any other MCP-compatible client**: use the same `command`/`args` —
35
- `npx -y codeaudit-mcp` — with `CODEAUDIT_TOKEN` as an optional env var.
36
-
37
48
  Then add one line to your agent's instructions file (e.g. `CLAUDE.md`) so
38
49
  the agent actually calls it — an MCP tool's description alone doesn't force
39
50
  an agent to invoke it:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "codeaudit-mcp",
3
- "version": "0.1.0",
3
+ "version": "0.1.1",
4
4
  "type": "module",
5
5
  "description": "MCP server for AI coding agents (Claude Code, Cursor, Cline, etc.) to verify a package is real and trustworthy before installing it.",
6
6
  "keywords": [