Is io.github.bierlingm/spikes safe to use?

io.github.bierlingm/spikes has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.bierlingm/spikes?

io.github.bierlingm/spikes supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.bierlingm/spikes do?

io.github.bierlingm/spikes provides 9 tools: get_spikes, get_element_feedback, get_hotspots, submit_spike, resolve_spike and 4 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.bierlingm/spikes?

io.github.bierlingm/spikes is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is io.github.bierlingm/spikes actively maintained?

io.github.bierlingm/spikes is recently maintained — last commit was 37 days ago. It has 1 GitHub stars.

io.github.bierlingm/spikes

spikes-mcp

UI feedback for AI-assisted building. Click elements, rate them, agents triage via MCP.

1 23/wk 9 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 37d ago

Works with most clients

Transport: stdio, sse

9 tools · ~401 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-bierlingm-spikes": {
      "args": [
        "-y",
        "spikes-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bierlingm-spikes)](https://mcppedia.org/s/io-github-bierlingm-spikes)

Read me

What io.github.bierlingm/spikes does

AI can build a prototype in an hour. Turning feedback into action is still the slow part.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'spikes-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked spikes-mcp against OSV.dev.

Inventory

Tools (9)

Click any tool to inspect its schema.

~401 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bierlingm/spikes safe to use?: io.github.bierlingm/spikes has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.bierlingm/spikes?: io.github.bierlingm/spikes supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bierlingm/spikes do?: io.github.bierlingm/spikes provides 9 tools: get_spikes, get_element_feedback, get_hotspots, submit_spike, resolve_spike and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bierlingm/spikes?: io.github.bierlingm/spikes is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.bierlingm/spikes actively maintained?: io.github.bierlingm/spikes is recently maintained — last commit was 37 days ago. It has 1 GitHub stars.

Similar servers

Others in other

View all →

Pi Lean Ctx95

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.0k 6

io.github.asklokesh/loki-mode94

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 34 tools over stdio.

992 8

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

531 6

Sunpeak93

App framework, testing framework, and inspector for MCP Apps.

193 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.bierlingm/spikes and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-bierlingm-spikes": {
      "args": [
        "-y",
        "spikes-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bierlingm-spikes)](https://mcppedia.org/s/io-github-bierlingm-spikes)

Read me

What io.github.bierlingm/spikes does

AI can build a prototype in an hour. Turning feedback into action is still the slow part.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'spikes-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

/ Spikes

The feedback loop for AI-assisted building

AI can build a prototype in an hour.
Turning feedback into action is still the slow part.

Quick Start · CLI Reference · Widget Docs · Hosted Dashboard · Self-Hosting

What Is This?

Spikes is a feedback tool for AI-assisted development. It lets reviewers leave targeted feedback directly on web pages — no screenshots, no "that button over there", no lost context.

Click any element. Rate it. Comment. Spikes captures the exact CSS selector, bounding box, and page context. Your AI agent gets structured JSON it can act on immediately.

No accounts required. No build step. Works on file://, localhost, anywhere.

Quick Start

1. Install the CLI

curl -fsSL https://spikes.sh/install.sh | sh
# Or: cargo install spikes

2. Initialize your project

spikes init                     # Defaults to hosted spikes.sh
# spikes init --self-host       # Opt out — scaffold a self-hosted config instead

spikes init creates .spikes/config.toml with a [remote] section pointing at https://spikes.sh by default. Pass --self-host (or answer s at the prompt) to skip the hosted defaults.

3. Add the widget to your HTML

spikes inject ./mockups/        # Injects widget script tag (uses configured endpoint)
spikes serve                    # http://localhost:3847

4. Collect and use feedback

spikes list                     # See all feedback
spikes list --json              # Feed to your agent
spikes list --rating no         # Find problems
spikes hotspots                 # Elements with most feedback
spikes resolve <id>             # Mark items done

CLI Commands

Command	Description
`spikes init`	Create `.spikes/` directory with config (hosted by default; `--self-host` to opt out)
`spikes list`	List feedback (`--json`, `--page`, `--reviewer`, `--rating`, `--unresolved`)
`spikes show <id>`	Show single spike details
`spikes export`	Export to JSON/CSV/JSONL/Cursor/Claude context
`spikes hotspots`	Elements with most feedback
`spikes reviewers`	List all reviewers
`spikes inject <dir>`	Add/remove widget from HTML files (`--endpoint <url>` overrides the configured endpoint)
`spikes serve`	Local dev server (`--port`, `--marked`, `--cors-allow-origin`)
`spikes mcp serve`	Start MCP server for AI agent integration
`spikes pull/push/sync`	Sync with remote endpoint
`spikes share <dir>`	Upload to spikes.sh for instant sharing
`spikes login/logout/whoami`	Authentication management
`spikes upgrade/billing`	Pro tier subscription via Stripe
`spikes deploy cloudflare`	Scaffold self-hosted Worker + D1

All commands support --json for scripting. See full CLI reference.

Viewing spikes for a hosted project:

The hosted dashboard at https://spikes.sh/dashboard lists every project you own and lets you drill into individual spikes (filter by page, rating, resolved, toggle resolved inline). Sign in directly in your browser: click Sign in, open the verification page, and confirm via the magic link sent to your email — no CLI required.

You can also hit the JSON API directly with your bearer token ($SPIKES_TOKEN from spikes login):

# GET /me/projects
# List all projects you own (with spike_count + last_activity)
curl -H "Authorization: Bearer $SPIKES_TOKEN" \
  https://spikes.sh/me/projects

# GET /me/projects/:key

... [View full README on GitHub](https://github.com/bierlingm/spikes#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked spikes-mcp against OSV.dev.

Inventory

Tools (9)

Click any tool to inspect its schema.

~401 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bierlingm/spikes safe to use?: io.github.bierlingm/spikes has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.bierlingm/spikes?: io.github.bierlingm/spikes supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bierlingm/spikes do?: io.github.bierlingm/spikes provides 9 tools: get_spikes, get_element_feedback, get_hotspots, submit_spike, resolve_spike and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bierlingm/spikes?: io.github.bierlingm/spikes is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.bierlingm/spikes actively maintained?: io.github.bierlingm/spikes is recently maintained — last commit was 37 days ago. It has 1 GitHub stars.

Similar servers

Others in other

View all →

Pi Lean Ctx95

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.0k 6

io.github.asklokesh/loki-mode94

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 34 tools over stdio.

992 8

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

531 6

Sunpeak93

App framework, testing framework, and inspector for MCP Apps.

193 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.bierlingm/spikes and similar servers.