Yaver runs on your own machine — the client starts it, so there is no endpoint to ping. 2 717 installs a week from npm. Last commit 11 Oct 2026.
Phone-first OpenCode MCP for trusted devices: run, build, deploy, and manage endpoint-local tools.
What changed 1
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 August 2026. No other catalogue keeps this.
What the code does
We read the source, 2 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
postinstall: node src/postinstall.js
пакет yaver-cli ссылается на kivanccakmak/yaver.io
execSync(cmd, { stdio: 'inherit' });
path.join(dir, key, ext),
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
{regexp.MustCompile(`\bchmod\s+(-[a-zA-Z]*R[a-zA-Z]*\s+)*777\s+/\s*$`), "chmod 777 on root"},
curl -sf -X POST "${{ secrets.YAVER_AGENT_URL }}/webhooks/trigger" \
if res, err := client.Get("http://169.254.169.254/hetzner/v1/metadata/hostname"); err == nil {
"-o", "ControlPath=~/.ssh/cm-%C",
replyTo: "[email protected]",
'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAmklEQVQ4T2NkoBAwUqifYdAY8J+B4T8jECMDEJuRgQGOQWxkNciADEBDQGyQGqgaFAPABjAw/GdgZPzPwMjw/z8jwBUMDEBnMjD8h7sEZCLIJSA+IwPY1XAXgA0gygCQSxgZ/v9nBLkY7A0GBrigYjYjigEkNSgqQJqQvAFjI/lBZABMPwi5AJlrIGYSFQYY4CUJDJgBAACqE…
LaunchAgent installed: ~/Library/LaunchAgents/io.yaver.agent.plist
if _, err := os.Stat("/.dockerenv"); err == nil {
- name: Render remote update script
env:
TARGET_VERSION: ${{ steps.target.outputs.version }}
m = __import__("robot_descriptions." + mod, fromlist=["URDF_PATH"])
FILE *fp = popen(cmd, "r");
win.eval(js);
process = subprocess.run(
docker run -itd --privileged --name "$NAME" -v "$WORK:/data" "$IMAGE" \
view.innerHTML = rows || '<p class="muted">No containers.</p>';
if strings.Contains(line, ".trycloudflare.com") {
echo %q >> ~/.ssh/authorized_keys
{regexp.MustCompile(`>\s*/etc/shadow\b`), "overwriting /etc/shadow"},
ENV MCP_PASSWORD=""
const entries = await fs.readdir(path.join(localDir, rel), { withFileTypes: true });
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add yaver -- npx -y yaver-cli{
"mcpServers": {
"yaver": {
"command": "npx",
"args": [
"-y",
"yaver-cli"
]
}
}
}[mcp_servers.yaver]
command = "npx"
args = ["-y", "yaver-cli"]{
"mcpServers": {
"yaver": {
"command": "npx",
"args": [
"-y",
"yaver-cli"
]
}
}
}{
"servers": {
"yaver": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"yaver-cli"
]
}
}
}Optional settings from the registry entry, left out of the block above:
YAVER_HEADLESS (Set to 1 to force device-code OAuth instead of opening a browser (useful in remote / WSL / sandboxed environments)).
Alternatives to Yaver
same job, measured the same wayPhone-first local dev MCP for Claude Code and Codex: install Yaver, pair mobile, run, build, deploy.
Run isolated code and manage apps, databases and deployments on Lizard (lizard.build).
MCP server for Vercel — manage deployments and view build and runtime application logs.
Render services, deploys, env vars and logs as MCP tools.
Deploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM — a CLI and an MCP server in one.
Build, deploy, and sell AI agents for local-service businesses - from your IDE.
Local MCP tools for secret status and guarded deployment. Values never reach the agent.
Build, deploy and manage MaShop e-commerce projects from Claude, Cursor or any MCP client.
Yaver — questions
Answers built from our own checks of this server.