Is io.github.symbo-ls/symbols-mcp safe to use?

io.github.symbo-ls/symbols-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.symbo-ls/symbols-mcp?

io.github.symbo-ls/symbols-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.symbo-ls/symbols-mcp do?

io.github.symbo-ls/symbols-mcp provides 5 tools: Tools, Resources, Prompts, Installation, Configuration. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.symbo-ls/symbols-mcp?

io.github.symbo-ls/symbols-mcp is compatible with claude-desktop, cursor, claude-code, windsurf. It uses stdio and sse and http transport.

Is io.github.symbo-ls/symbols-mcp actively maintained?

io.github.symbo-ls/symbols-mcp is actively maintained — last commit was 5 days ago. It has 1 GitHub stars.

io.github.symbo-ls/symbols-mcp

Official

@symbo.ls/mcp

Symbols.app MCP — docs, code generation, publishing, CLI/SDK reference

1 5 tools GitHub npm PyPI

No known CVEs

No license

Actively maintained

Last commit 5d ago

Works with most clients

Transport: stdio, sse, http

5 tools · ~119 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "symbols": {
      "args": [
        "--refresh",
        "symbols-mcp"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-symbo-ls-symbols-mcp)](https://mcppedia.org/s/io-github-symbo-ls-symbols-mcp)

Read me

What io.github.symbo-ls/symbols-mcp does

MCP server for Symbols.app — provides documentation search, code generation, conversion, auditing, project management, publishing/deployment, and CLI/SDK reference tools for AI coding assistants (Cursor, Claude Code, Windsurf, claude.ai, etc.).

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@symbo.ls/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @symbo.ls/mcp against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~119 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.symbo-ls/symbols-mcp safe to use?: io.github.symbo-ls/symbols-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.symbo-ls/symbols-mcp?: io.github.symbo-ls/symbols-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.symbo-ls/symbols-mcp do?: io.github.symbo-ls/symbols-mcp provides 5 tools: Tools, Resources, Prompts, Installation, Configuration. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.symbo-ls/symbols-mcp?: io.github.symbo-ls/symbols-mcp is compatible with claude-desktop, cursor, claude-code, windsurf. It uses stdio and sse and http transport.
Is io.github.symbo-ls/symbols-mcp actively maintained?: io.github.symbo-ls/symbols-mcp is actively maintained — last commit was 5 days ago. It has 1 GitHub stars.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.symbo-ls/symbols-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "symbols": {
      "args": [
        "--refresh",
        "symbols-mcp"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-symbo-ls-symbols-mcp)](https://mcppedia.org/s/io-github-symbo-ls-symbols-mcp)

Read me

What io.github.symbo-ls/symbols-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@symbo.ls/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

symbols-mcp

mcp-name: io.github.symbo-ls/symbols-mcp

Targets the modern smbls stack — flat element API, signal-based reactivity, declarative fetch: (@symbo.ls/fetch), polyglot translations (@symbo.ls/polyglot), helmet metadata (@symbo.ls/helmet), SPA routing via el.router(...), theme via @symbo.ls/scratch, and SSR via @symbo.ls/brender.

No API keys required for documentation tools. Project management tools require a Symbols account (login or API key).

Tools

Context — start here

Tool	Description
`get_project_context`	CALL FIRST. Walks up from cwd to find `symbols.json`, returns owner, key, dir, bundler, sharedLibraries, brender, env_type (local/cdn/json_runtime/remote_server), env_evidence, env_guidance, token_present, and a `next_step` hint telling the agent what to do (ask user, log in, or proceed). Replaces the older `detect_environment` for new code.
`get_project_rules`	Bundled mandatory ruleset (FRAMEWORK + DESIGN_SYSTEM + RULES + DEFAULT_PROJECT, ≈180K chars). Call before any code generation task.
`get_cli_reference`	Complete Symbols CLI (`@symbo.ls/cli`) command reference.
`get_sdk_reference`	Complete Symbols SDK (`@symbo.ls/sdk`) API reference.
`search_symbols_docs`	Keyword search across all bundled Symbols documentation files.
`detect_environment`	[Legacy] Caller-supplied flags variant of env classification. Prefer `get_project_context`.

Generation & conversion

Tool	Description
`generate_component`	Generate a DOMQL component from a natural language description. Returns prompt + bundled context (≈300K chars).
`generate_page`	Generate a full page with routing, helmet metadata, and declarative `fetch:` integration.
`convert_react`	Convert React/JSX code to Symbols DOMQL (modern smbls stack).
`convert_html`	Convert raw HTML/CSS to Symbols DOMQL components.
`convert_to_json`	Convert DOMQL JS source to platform JSON (mirrors frank's toJSON pipeline). Use after `generate_component` / `generate_page` to feed `save_to_project`.

Audit

Tool	Description
`audit_component`	Inline VALIDATOR for a single component string. Returns violations + warnings (≈1K chars). Use during generation. Pass `include_playbook=True` to also dump the AUDIT.md playbook.
`audit_project`	Returns the multi-phase project audit PLAYBOOK (instructions for the agent — Phase 0 setup → Phase 5 report). Pair with `bin/symbols-audit` CLI for the static-audit phase.

For filesystem-wide audits the package ships a CLI: npx -y @symbo.ls/mcp symbols-audit <symbols-dir> (strict by default, exit 1 on findings). Under the hood it runs frank-audit audit --strict — the audit core is now @symbo.ls/frank-audit, the AST-based engine that owns the canonical 59-rule registry, prescription generation, and verify-or-rollback fixers.

lib/audit.js is preserved as a backward-compat shim that delegates to frank-audit (subprocess CLI, or the /audit-content HTTP endpoint when FRANK_AUDIT_URL is set). The legacy programmatic API stays callable for non-CLI consumers (the @symbo.ls/cli, the MCP HTTP worker, web/edge clients):

const {
  auditContent,         // audit one component string (delegates to frank-audit)
  auditFiles,           // audit a list of {path, content}
  auditDirectory,       // walk a symbols/ dir via `frank-audit audit <dir>`
  mergeFindings,        // preserve status across runs
  summarize,            // breakdown by severity / category / origin
} = require('@symbo.ls/mcp/lib/audit')

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @symbo.ls/mcp against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~119 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.symbo-ls/symbols-mcp safe to use?: io.github.symbo-ls/symbols-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.symbo-ls/symbols-mcp?: io.github.symbo-ls/symbols-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.symbo-ls/symbols-mcp do?: io.github.symbo-ls/symbols-mcp provides 5 tools: Tools, Resources, Prompts, Installation, Configuration. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.symbo-ls/symbols-mcp?: io.github.symbo-ls/symbols-mcp is compatible with claude-desktop, cursor, claude-code, windsurf. It uses stdio and sse and http transport.
Is io.github.symbo-ls/symbols-mcp actively maintained?: io.github.symbo-ls/symbols-mcp is actively maintained — last commit was 5 days ago. It has 1 GitHub stars.