mcpbeat Sign in

Weavatrix Online MCP Server

local only

Weavatrix Online runs on your own machine — the client starts it, so there is no endpoint to ping. 92 installs a week from npm. Last commit 24 Aug 2026.

Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

Installs per day peak 236 · avg 28 · +52% w/w
a month agotoday
92
Installs / week
npm · weavatrix-online
1
Stars
0 open issues
24 Aug 2026
Last commit
0 releases in 90 days
MIT
License
JavaScript

What changed 25

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 25 August 2026. No other catalogue keeps this.

18 Sep the owner changed
17 Sep the owner changed
16 Sep the owner changed
15 Sep the owner changed
14 Sep the owner changed
13 Sep the owner changed
12 Sep the owner changed
11 Sep the owner changed
10 Sep the owner changed
9 Sep the owner changed
and 15 more, back to 25 August 2026

What the code does

We read the source, 7 d ago · rules 3dff92dd89df

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Reads secrets and sends them out [пакет] src/security/malware-rules.mjs:57
    pattern: /(?:readFileSync|readFile|createReadStream|openSync|Get-Content|\bcat\s)[\s\S]{0,100}?(?:\.ssh\/id_(?:rsa|ed25519|dsa)|\.aws\/credentials|\.git-credentials|\/etc\/shadow|\.docker\/config\.json|\.kube\/config)/i,
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Package points at a different repository sergii-ziborov/weavatrix-online
пакет weavatrix-online ссылается на weavatrix/weavatrix-online
    pattern: /(?:readFileSync|readFile|createReadStream|openSync|Get-Content|\bcat\s)[\s\S]{0,100}?(?:\.ssh\/id_(?:rsa|ed25519|dsa)|\.aws\/credentials|\.git-credentials|\/etc\/shadow|\.docker\/config\.json|\.kube\/config)/i,
    pattern: /discord(?:app)?\.com\/api\/webhooks|hooks\.slack\.com\/services|api\.telegram\.org\/bot|pastebin\.com\/raw|burpcollaborator|oastify\.com|interact\.sh|webhook\.site|canarytokens\.(?:com|org)|dnslog\.cn/i,

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Weavatrix Online and you get told the day something new turns up.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add weavatrix-online -- npx -y weavatrix-online
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "weavatrix-online": {
      "args": [
        "-y",
        "weavatrix-online"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.weavatrix-online]
command = "npx"
args = ["-y", "weavatrix-online"]
.cursor/mcp.json
{
  "mcpServers": {
    "weavatrix-online": {
      "args": [
        "-y",
        "weavatrix-online"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "weavatrix-online": {
      "args": [
        "-y",
        "weavatrix-online"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: WEAVATRIX_SYNC_URL (Cloud or compatible self-hosted sync endpoint), WEAVATRIX_SYNC_TOKEN (Scoped bearer token for the selected endpoint), WEAVATRIX_CAPABILITIES_URL (Optional explicit endpoint capability document URL; defaults to /api/v1/capabilities on the sync origin with legacy /api/health fallback), WEAVATRIX_ARCHITECTURE_URL (Optional explicit architecture-contract URL), WEAVATRIX_PRECISION (Core semantic precision: lsp (default) or off), WEAVATRIX_ADVISORY_STORE (Optional local advisory-cache file override). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Weavatrix Online

same job, measured the same way
Weavatrix Online
by weavatrix

Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

local only
Quicksign
by causehacker

E-signatures for contracts and NDAs. Draft with AI, review, and send for signature.

22 installs/wk 4 tools answering
Big Indexer
by ahmedxuhri

Architecture-aware MCP context with boundaries, seams, impact scope, and BGI-TWIN guidance.

78 installs/wk local only
Stratum MCP
by smartmemory

Structured execution for coding agents: contracts, postconditions, gates, guardrails.

610 installs/wk local only
Zip Archive Create Extract Bomb Guard
by theluckystrike

Create, inspect and extract zip archives offline, with traversal, symlink and zip-bomb guards.

12 tools answering
Zip
by theluckystrike

Create, inspect and extract zip archives offline, with traversal, symlink and zip-bomb guards.

local only
Revibe MCP
by selvatuple

Analyze any codebase — get architecture, file roles, execution flows, and agent context.

29 installs/wk local only
CodeCartographer
by huginnindustries

Turn an unfamiliar codebase into validated architecture, contracts, and a reimplementation spec.

3 193 installs/wk local only

Weavatrix Online — questions

Answers built from our own checks of this server.

Why is there no uptime for Weavatrix Online?
Weavatrix Online runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package weavatrix-online was installed 92 times last week.
How do I connect Weavatrix Online?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls weavatrix-online straight from npm; nothing to host, nothing to sign up for.
How many people use Weavatrix Online?
The npm package weavatrix-online was installed 92 times in the last week. Week over week that is +52%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Weavatrix Online open source?
Yes — it is published under the MIT licence, written in JavaScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.