Is io.github.kivanccakmak/yaver safe to use?

io.github.kivanccakmak/yaver has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.kivanccakmak/yaver?

io.github.kivanccakmak/yaver supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.kivanccakmak/yaver?

io.github.kivanccakmak/yaver is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.kivanccakmak/yaver actively maintained?

io.github.kivanccakmak/yaver is actively maintained — last commit was 1 day ago. It has 4 GitHub stars.

io.github.kivanccakmak/yaver

vercel

P2P dev-machine MCP for phone-driven coding agents: hot reload, builds, deploys.

4 2.9M/wk GitHub npm PyPI

No known CVEs

No license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Developer Tools DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "yaver": {
      "args": [
        "mcp"
      ],
      "command": "yaver"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kivanccakmak-yaver)](https://mcppedia.org/s/io-github-kivanccakmak-yaver)

Read me

What io.github.kivanccakmak/yaver does

Docs: CI setup · Test SDK · Runtime Control Plane

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'vercel' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-44479medium · fixedCVSS 5.5

Vercel: Non-interactive mode includes CLI arguments in suggested command output

# Summary When the Vercel CLI runs in non-interactive mode (`--non-interactive` or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via `--token` or `-t` on the command line, the token value is included verbatim in those suggestions. # Conditions All three must be true for the token to appear in output: 1. Token passed as a CLI argument (`--token` / `-t`). The `VERCEL_TOKEN` environment variabl

Affected: >= 50.16.0Fixed in 52.0.1source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kivanccakmak/yaver safe to use?: io.github.kivanccakmak/yaver has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.kivanccakmak/yaver?: io.github.kivanccakmak/yaver supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.kivanccakmak/yaver?: io.github.kivanccakmak/yaver is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.kivanccakmak/yaver actively maintained?: io.github.kivanccakmak/yaver is actively maintained — last commit was 1 day ago. It has 4 GitHub stars.

Similar servers

Others in developer-tools / devops

View all →

Filesystem MCP Server98

Read, write, and manage files on the local filesystem

87.9k 7

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.kivanccakmak/yaver and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "yaver": {
      "args": [
        "mcp"
      ],
      "command": "yaver"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kivanccakmak-yaver)](https://mcppedia.org/s/io-github-kivanccakmak-yaver)

Read me

What io.github.kivanccakmak/yaver does

Docs: CI setup · Test SDK · Runtime Control Plane

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'vercel' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Yaver

Yaver is a local-first developer toolkit for driving coding agents, previews, feedback, and deploy loops from your phone.

Your code stays on your machine. The mobile app is the remote control; the yaver agent runs on your Mac, Linux box, WSL machine, Pi, or VPS; the SDK captures feedback from your own dev builds.

Watch the landing demo

What Works Today

Run Claude Code, Codex, OpenCode, Aider, Goose, or another terminal agent from the Yaver agent.
Push React Native / Expo bundles to a paired phone through the native Hermes path.
Capture dev-build feedback with screenshots, logs, and replay context.
Stream task, build, and reload progress back to mobile or the web dashboard.
Keep peer discovery, relay, and vault flows local-first and self-hostable.
Use SDKs and examples for React Native, Flutter, web, Unity, Go, Python, and JS/TS.

Quick Start

npm install -g yaver-cli
yaver auth
yaver serve

For headless machines:

yaver auth --headless
yaver serve

If an AI coding agent is setting Yaver up for you, read the canonical machine guide first:

curl -s https://yaver.io/llms.txt

Use from Claude Code, Codex, or opencode (MCP)

Yaver ships an MCP server, so a coding agent can drive your machine directly. You do not need a global install first — npx pulls the server on first run. Register it once, then ask the agent to call yaver_lazy_setup; it surfaces the sign-in link for you to tap and pairs your phone from inside the chat.

# Claude Code
claude mcp add --scope user yaver -- npx -y yaver-cli yaver-mcp

# Codex
codex mcp add yaver -- npx -y yaver-cli yaver-mcp

# opencode
npm install -g yaver-cli && yaver mcp setup opencode

Already installed Yaver globally? yaver mcp setup claude-code (or codex / opencode) writes the same entry, and yaver auth auto-registers every installed runner on first sign-in. Yaver is published to the official MCP registry as io.github.kivanccakmak/yaver. Full tool list and HTTP/remote setup: MCP guide.

Core Loop

Start yaver serve on your own machine.
Pair the mobile app or web dashboard with that agent.
Send a task to your coding agent from the phone.
Watch terminal/build/reload progress live.
Push the fix to a real device or deploy from your own machine when ready.

Repository Map

Path	Purpose
`desktop/agent/`	Go agent, CLI surfaces, local API, relay/P2P/runtime integrations
`mobile/`	React Native mobile app and native preview container
`web/`	Next.js marketing site and dashboard
`backend/convex/`	Hosted identity, session, and device-discovery metadata
`relay/`	QUIC relay service
`sdk/`	Public SDKs and feedback clients
`demo/`	Small fixture apps used to test SDK and push flows
`demo-videos/`	Source notes for the landing/demo clips
`docs/`	Architecture notes, setup guides, audits, handoffs, and planning material

Documentation

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-44479medium · fixedCVSS 5.5

Vercel: Non-interactive mode includes CLI arguments in suggested command output

Affected: >= 50.16.0Fixed in 52.0.1source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kivanccakmak/yaver safe to use?: io.github.kivanccakmak/yaver has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.kivanccakmak/yaver?: io.github.kivanccakmak/yaver supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.kivanccakmak/yaver?: io.github.kivanccakmak/yaver is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.kivanccakmak/yaver actively maintained?: io.github.kivanccakmak/yaver is actively maintained — last commit was 1 day ago. It has 4 GitHub stars.