Weavatrix Online runs on your own machine — the client starts it, so there is no endpoint to ping. 92 installs a week from npm. Last commit 24 Aug 2026.
Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.
What changed 1
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 25 August 2026. No other catalogue keeps this.
What the code does
We read the source, 2 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
пакет weavatrix-online ссылается на weavatrix/weavatrix-online
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add weavatrix-online -e 'WEAVATRIX_SYNC_URL=<WEAVATRIX_SYNC_URL>' -e 'WEAVATRIX_SYNC_TOKEN=<WEAVATRIX_SYNC_TOKEN>' -- npx -y weavatrix-online{
"mcpServers": {
"weavatrix-online": {
"command": "npx",
"args": [
"-y",
"weavatrix-online"
],
"env": {
"WEAVATRIX_SYNC_TOKEN": "<WEAVATRIX_SYNC_TOKEN>",
"WEAVATRIX_SYNC_URL": "<WEAVATRIX_SYNC_URL>"
}
}
}
}[mcp_servers.weavatrix-online]
command = "npx"
args = ["-y", "weavatrix-online"]
env = { WEAVATRIX_SYNC_URL = "<WEAVATRIX_SYNC_URL>", WEAVATRIX_SYNC_TOKEN = "<WEAVATRIX_SYNC_TOKEN>" }{
"mcpServers": {
"weavatrix-online": {
"command": "npx",
"args": [
"-y",
"weavatrix-online"
],
"env": {
"WEAVATRIX_SYNC_TOKEN": "<WEAVATRIX_SYNC_TOKEN>",
"WEAVATRIX_SYNC_URL": "<WEAVATRIX_SYNC_URL>"
}
}
}
}{
"servers": {
"weavatrix-online": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"weavatrix-online"
],
"env": {
"WEAVATRIX_SYNC_TOKEN": "<WEAVATRIX_SYNC_TOKEN>",
"WEAVATRIX_SYNC_URL": "<WEAVATRIX_SYNC_URL>"
}
}
}
}Put your own values in place of
<WEAVATRIX_SYNC_URL> (Cloud or compatible self-hosted sync endpoint), <WEAVATRIX_SYNC_TOKEN> (Scoped bearer token for the selected endpoint).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
WEAVATRIX_CAPABILITIES_URL (Optional explicit endpoint capability document URL; defaults to /api/v1/capabilities on the sync origin with legacy /api/health fallback), WEAVATRIX_ARCHITECTURE_URL (Optional explicit architecture-contract URL), WEAVATRIX_PRECISION (Core semantic precision: lsp (default) or off), WEAVATRIX_ADVISORY_STORE (Optional local advisory-cache file override).
Alternatives to Weavatrix Online
same job, measured the same wayWeavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.
Web malware techniques, kits and EtherHiding contracts from Ohey's website scans. No sign-in.
Extract a repo's contribution gates into machine-readable contribution-gates.json.
E-signatures for contracts and NDAs. Draft with AI, review, and send for signature.
Safe Plastic SCM / Unity Version Control MCP: history, review, merge preview, and guarded writes.
One MCP server for web search, page extraction, and cited research.
Read, search, validate, and analyze Architecture Decision Records.
Architecture-aware MCP context with boundaries, seams, impact scope, and BGI-TWIN guidance.
Weavatrix Online — questions
Answers built from our own checks of this server.