Yaver runs on your own machine — the client starts it, so there is no endpoint to ping. 2 267 installs a week from npm. Last commit 15 Sep 2026.
Phone-first local dev MCP for Claude Code and Codex: install Yaver, pair mobile, run, build, deploy.
What changed 14
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 August 2026. No other catalogue keeps this.
What the code does
We read the source, 57 min ago · rules 3dff92dd89df
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
postinstall: node src/postinstall.js
пакет yaver-cli ссылается на kivanccakmak/yaver.io
execSync(cmd, { stdio: 'inherit' });
path.join(dir, key, ext),
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
{regexp.MustCompile(`\bchmod\s+(-[a-zA-Z]*R[a-zA-Z]*\s+)*777\s+/\s*$`), "chmod 777 on root"},
var sudoPattern = regexp.MustCompile(`^\s*(sudo\b|su\s|doas\b)`)
if res, err := client.Get("http://169.254.169.254/hetzner/v1/metadata/hostname"); err == nil {
curl -sf -X POST "${{ secrets.YAVER_AGENT_URL }}/webhooks/trigger" \
"-o", "ControlPath=~/.ssh/cm-%C",
replyTo: "[email protected]",
darwinLaunchAgentPath = "Library/LaunchAgents/io.yaver.agent.plist"
'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAmklEQVQ4T2NkoBAwUqifYdAY8J+B4T8jECMDEJuRgQGOQWxkNciADEBDQGyQGqgaFAPABjAw/GdgZPzPwMjw/z8jwBUMDEBnMjD8h7sEZCLIJSA+IwPY1XAXgA0gygCQSxgZ/v9nBLkY7A0GBrigYjYjigEkNSgqQJqQvAFjI/lBZABMPwi5AJlrIGYSFQYY4CUJDJgBAACqE…
if _, err := os.Stat("/.dockerenv"); err == nil {
- name: Render remote update script
env:
TARGET_VERSION: ${{ steps.target.outputs.version }}
m = __import__("robot_descriptions." + mod, fromlist=["URDF_PATH"])
FILE *fp = popen(cmd, "r");
win.eval(js);
docker run -itd --privileged --name "$NAME" -v "$WORK:/data" "$IMAGE" \
view.innerHTML = rows || '<p class="muted">No containers.</p>';
if strings.Contains(line, ".trycloudflare.com") {
echo %q >> ~/.ssh/authorized_keys
{regexp.MustCompile(`>\s*/etc/shadow\b`), "overwriting /etc/shadow"},
ENV MCP_PASSWORD=""
const entries = await fs.readdir(path.join(localDir, rel), { withFileTypes: true });
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add yaver -- npx -y yaver-cli{
"mcpServers": {
"yaver": {
"args": [
"-y",
"yaver-cli"
],
"command": "npx"
}
}
}[mcp_servers.yaver]
command = "npx"
args = ["-y", "yaver-cli"]{
"mcpServers": {
"yaver": {
"args": [
"-y",
"yaver-cli"
],
"command": "npx"
}
}
}{
"mcpServers": {
"yaver": {
"args": [
"-y",
"yaver-cli"
],
"command": "npx"
}
}
}This one needs environment variables set before it will start:
YAVER_HEADLESS (Set to 1 to force device-code OAuth instead of opening a browser (useful in remote / WSL / sandboxed environments).).
The author declared them in the registry entry; get the values from the project itself.
Alternatives to Yaver
same job, measured the same wayPhone-first local dev MCP for Claude Code and Codex: install Yaver, pair mobile, run, build, deploy.
Local-first dashboard + MCP for Claude Code and Codex token usage. Per-MCP/tool breakdown.
Local-first MCP server for Claude/Codex project wiki and graph workflows
Local-first intent and provenance for Codex, Claude Code, Cursor, Gemini CLI, and MCP agents.
Local-first multilingual, auditable memory for Codex, Claude Code, and MCP clients.
Durable local-first MCP relay for independent coding agents.
Search the skill-builder registry and auto-install skills for Claude Code, Cursor, and Codex.
Local-first automatic memory for Claude Code and Codex: capture, distill, recall from SQLite.
Yaver — questions
Answers built from our own checks of this server.