io.github.vercel/next-devtools-mcp

Name: io.github.vercel/next-devtools-mcp
Author: io.github.vercel

MCPcommunity

v0.3.6io.github.vercelUnknownUpdated 8mo agonpm GitHub

Next.js development tools MCP server with stdio transport

is a Model Context Protocol (MCP) server that provides Next.js development tools and utilities for coding agents like Claude and Cursor. Node.js v20.19 or a newer latest maintenance LTS version Add the following config to your MCP client: Using ensures that your MCP client will always use the latest version of the Next.js DevTools MCP server. Or configure manually: Follow Amp's MCP documentation…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

8mo agoLast update

Package

Authorio.github.vercel

LicenseUnknown

Version0.3.6

Sourcemcp-registry

npmnext-devtools-mcp

GitHubvercel/next-devtools-mcp

Trust Status

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies60 resolved · 2 with advisories

Tool surface25 tools · 1 privileged

Security scan⚠ Warnings (5)v0.3.10 · 2mo ago

HIGH@modelcontextprotocol/sdk@1.24.3@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse HIGH@modelcontextprotocol/sdk@1.24.3Anthropic's MCP TypeScript SDK has a ReDoS vulnerability HIGHundici@7.16.0Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client MODERATEundici@7.16.0Undici has an HTTP Request/Response Smuggling issue+1 more — run forge verify next-devtools-mcp

EvalsNone

IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Keywords

mcp