Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Untested on Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"mcp-registry-registry": {
"args": [
"-y",
"@mastra/mcp-registry-registry"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/mcp-registry-registry)
Read me
What Mcp Registry Registry does
Mastra is a framework for building AI-powered applications and agents with a modern TypeScript stack.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@mastra/mcp-registry-registry' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
63/100across 5 weighted dimensions
0255075100
20
19
14
10
−37
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 open1 fixed
MAL-2026-6027info
Malicious code in @mastra/mcp-registry-registry (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (45ba997a42d41e72f38a36e0a6122b28388f73eb479dc41f7c1b77b6a75f91c8) The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: ghsa-malware (d565975ff7c83efbde8da1110e6be04ef6ae86591cc052f1d9052ae0175b3320) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be
CVE-2025-61685medium · fixedCVSS 6.5
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
The Mastra Docs MCP Server package `@mastra/mcp-docs-server` is a server designed to provide documentation context to AI agentic workflows, such as those used in AI-powered IDEs. **Resources:** * Package URL: [https://www.npmjs.com/package/@mastra/mcp-docs-server](https://www.npmjs.com/package/@mastra/mcp-docs-server) ----- ## Overview The `@mastra/mcp-docs-server` package in versions **0.13.18 and below** is vulnerable to a Directory Traversal attack that results in the disclosure of dir
Inventory
Prompts (1)
Make new Mastra projectPrompt to create a new Mastra project by asking questions about project name and LLM provider, then running the setup command and starting the dev server with Mastra Studio
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Mcp Registry Registry safe to use?
- Mcp Registry Registry has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "@mastra/mcp-registry-registry". Review the Security section above for details before installing.
- How do I install Mcp Registry Registry?
- Mcp Registry Registry supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Mcp Registry Registry?
- Mcp Registry Registry is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
- Is Mcp Registry Registry actively maintained?
- Mcp Registry Registry is actively maintained — last commit was 0 days ago. It has 26,330 GitHub stars.
Related
Similar servers
Others in other
Pi Lean Ctx93Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.
3.3k 6
Headroom93Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
59.9k 3
Sigmap9297% token reduction for AI coding sessions — zero deps, 21 languages, MCP server
598 6
S
Sunpeak92App framework, testing framework, and inspector for MCP Apps.
207 1
MCP Security Weekly
Get CVE alerts and security updates for Mcp Registry Registry and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.