This server has been archived and is no longer actively maintained.
io.github.kivanccakmak/yaver is an MCP server that P2P dev-machine MCP for phone-driven coding agents: hot reload, builds, deploys. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 47/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"yaver": {
"args": [
"mcp"
],
"command": "yaver"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-kivanccakmak-yaver)
Read me
What io.github.kivanccakmak/yaver does
Docs: CI setup · Test SDK · Runtime Control Plane
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'vercel' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
47/100across 5 weighted dimensions
0255075100
8
17
12
10
−53
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 open1 fixed
CVE-2026-10177mediumCVSS 6.3
Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint
A security vulnerability has been detected in Aider-AI Aider 0.86.3.dev. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. It is suggested to install a patch to address this issue. The pull request to fix this issue awaits acceptance.
Affected:
>= 0source →CVE-2026-10175mediumCVSS 6.3
Aider is vulnerable to Code Injection via editor_coder.run function
A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected:
>= 0source →CVE-2026-44479medium · fixedCVSS 5.5
Vercel: Non-interactive mode includes CLI arguments in suggested command output
# Summary When the Vercel CLI runs in non-interactive mode (`--non-interactive` or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via `--token` or `-t` on the command line, the token value is included verbatim in those suggestions. # Conditions All three must be true for the token to appear in output: 1. Token passed as a CLI argument (`--token` / `-t`). The `VERCEL_TOKEN` environment variabl
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.kivanccakmak/yaver safe to use?
- io.github.kivanccakmak/yaver has 4 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "vercel". Review the Security section above for details before installing.
- How do I install io.github.kivanccakmak/yaver?
- io.github.kivanccakmak/yaver supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with io.github.kivanccakmak/yaver?
- io.github.kivanccakmak/yaver is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is io.github.kivanccakmak/yaver actively maintained?
- io.github.kivanccakmak/yaver is actively maintained — last commit was 0 days ago. It has 4 GitHub stars.
Related
Similar servers
Others in developer-tools / devops
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
61.1k 2
X
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.3k 1
XcodeBuildMCP97A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
6.3k 2
Browser Tools Mcp96Monitor browser logs directly from Cursor and other MCP compatible IDEs.
7.3k 7
MCP Security Weekly
Get CVE alerts and security updates for io.github.kivanccakmak/yaver and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.