I
io.github.lastmanupinc-hub/axis-toolbox
vite
Generate AGENTS.md, AP2 compliance docs, checkout rules, debug playbook & MCP configs from any repo.
No known CVEs
MIT license
Actively maintained
Last commit 0d ago
Works with most clients
Transport: stdio, sse, http
6 tools · ~269 tok
Grade A · 0.1% of 200K ctx
MCPpedia last refreshed this data
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io-github-lastmanupinc-hub-axis-toolbox": {
"args": [
"-y",
"vite"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-lastmanupinc-hub-axis-toolbox)
Read me
What io.github.lastmanupinc-hub/axis-toolbox does
Axis' Iliad — The modern epic that shapes raw codebases into canonical, agent-ready artifacts. Axis' Iliad authors the definitive foundation for the next era of natural-language workspace development.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'vite' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Loading README…
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
92/100across 5 weighted dimensions
0255075100
30
17
20
15
10
−8
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev22 fixed
CVE-2026-53632info · fixed
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
### Summary The `launch-editor` NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking. ### Impact If the following conditions are met, an attacker can get the NTLMv2 password hash on the computer that is using the `launch-edit
CVE-2026-53571high · fixedCVSS 7.5
vite: `server.fs.deny` bypass on Windows alternate paths
### Summary The contents of files that are specified by [`server.fs.deny`](https://vite.dev/config/server-options#server-fs-deny) can be returned to the browser on Windows. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using `--host` or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) - the sensitive file exists in the allowed directories specified by [`server.fs.allow`]
CVE-2024-52011info · fixed
launch-editor vulnerable to command injection via the crafted request on Windows
### Summary Due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters. ### Impact If the following conditions are met, an attacker can execute arbitrary commands on the computer that is using the `launch-editor`: - An attacker can place a file with the malicious filename - An attacker can call the `launchEditor` method with the `file` argument controlled - The
CVE-2026-39365info · fixed
Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling
### Summary Any files ending with `.map` even out side the project can be returned to the browser. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using `--host` or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) - have a sensitive content in files ending with `.map` and the path is predictable ### Details In Vite v7.3.1, the dev server’s handling of `.map` requests for
CVE-2026-39364info · fixed
Vite: `server.fs.deny` bypassed with queries
### Summary The contents of files that are specified by [`server.fs.deny`](https://vite.dev/config/server-options#server-fs-deny) can be returned to the browser. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using `--host` or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) - the sensitive file exists in the allowed directories specified by [`server.fs.allow`](https://vi
Inventory
Tools (6)
Click any tool to inspect its schema.
~269 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.lastmanupinc-hub/axis-toolbox safe to use?
- io.github.lastmanupinc-hub/axis-toolbox has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install io.github.lastmanupinc-hub/axis-toolbox?
- io.github.lastmanupinc-hub/axis-toolbox supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.lastmanupinc-hub/axis-toolbox do?
- io.github.lastmanupinc-hub/axis-toolbox provides 6 tools: list_programs, search_and_discover_tools, discover_commerce_tools, discover_agentic_purchasing_needs, get_referral_code and 1 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.lastmanupinc-hub/axis-toolbox?
- io.github.lastmanupinc-hub/axis-toolbox is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is io.github.lastmanupinc-hub/axis-toolbox actively maintained?
- io.github.lastmanupinc-hub/axis-toolbox is actively maintained — last commit was 0 days ago.
Related
Similar servers
Others in developer-tools
X
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.1k 1
Supabase MCP Server97Manage Supabase projects — databases, auth, storage, and edge functions
2.8k 4
XcodeBuildMCP97A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
6.1k 2
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
59.8k 2
MCP Security Weekly
Get CVE alerts and security updates for io.github.lastmanupinc-hub/axis-toolbox and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.
