Spikes runs on your own machine — the client starts it, so there is no endpoint to ping. 46 installs a week from npm. Last commit 18 Sep 2026.
UI feedback for AI-assisted building. Click elements, rate them, agents triage via MCP.
We read the source, 6 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
var child = spawn(binPath, args, {
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
result = subprocess.run(cmd, capture_output=True, text=True, timeout=5)
spikesList.innerHTML = html;
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add spikes -- npx -y spikes-mcp
{
"mcpServers": {
"spikes": {
"command": "npx",
"args": [
"-y",
"spikes-mcp"
]
}
}
}
[mcp_servers.spikes]
command = "npx"
args = ["-y", "spikes-mcp"]
{
"mcpServers": {
"spikes": {
"command": "npx",
"args": [
"-y",
"spikes-mcp"
]
}
}
}
{
"servers": {
"spikes": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"spikes-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
SPIKES_TOKEN (Bearer token for the hosted Spikes API. Required only when using --remote mode against spikes.sh. Local mode reads .spikes/feedback.jsonl and needs no token), SPIKES_API_URL (Override the Spikes API base URL. Defaults to https://spikes.sh/api. Useful for self-hosted Spikes workers).
Feedback bus for coding agents: pin feedback on the app you're building; a fix turns the pin green
Agent-ready feedback for AI-built apps — read and close UI feedback reports over MCP.
Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend
UI feedback from a browser extension (note, element, screenshot) for coding agents to resolve.
Trust metadata for AI agents — check files before building on them, stamp verified work.
Product price checks and affiliate link building for AI shopping agents.
Behavioral therapy for AI agents — self-diagnosis, alignment, and training via MCP
Snap decisions for coding agents: local or hosted classify/check/score/rank via MCP.
Answers built from our own checks of this server.