Skip to content

Add Context7 MCP server configuration#18

Open
cloud-dev-indent[bot] wants to merge 1 commit intomainfrom
indent-2026-04-22-add-context7-mcp
Open

Add Context7 MCP server configuration#18
cloud-dev-indent[bot] wants to merge 1 commit intomainfrom
indent-2026-04-22-add-context7-mcp

Conversation

@cloud-dev-indent
Copy link
Copy Markdown

Summary

  • Adds .mcp.json with Context7 MCP server configuration (@upstash/context7-mcp) for documentation lookup.

Motivation
Requested for testing purposes to configure the Context7 MCP server in this repository.

Testing
No tests needed — this is a static configuration file.

Open in Indent Slack Thread
Tag @indent to continue the conversation here.

Generated with [Indent](https://indent.com)
Co-Authored-By: Indent <noreply@indent.com>
@indent
Copy link
Copy Markdown

indent Bot commented Apr 22, 2026

PR Summary

This PR adds a .mcp.json configuration file to the static assets repository to enable Context7 MCP server for documentation lookup. The repository is served via GitHub Pages at assets.indent.com, so the config file will be publicly accessible.

  • Added .mcp.json at the repository root configuring the context7 MCP server via npx -y @upstash/context7-mcp@latest

Issues

2 potential issues found:

  • This repository is served via GitHub Pages at assets.indent.com, so .mcp.json will be publicly accessible at https://assets.indent.com/.mcp.json. This exposes internal dev tooling configuration on the public CDN. Consider whether this config belongs in a code repository instead, or add a .gitignore / GitHub Pages exclusion to prevent it from being served. → Autofix
  • The @upstash/context7-mcp@latest tag is unpinned. Consider pinning to a specific version (e.g., @upstash/context7-mcp@1.x.x) for supply-chain hygiene. → Autofix

CI Checks

Waiting for CI checks...


⚡ Autofix All Issues

Comment thread .mcp.json
@@ -0,0 +1,8 @@
{
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dev config will be publicly served: This repository is deployed via GitHub Pages at assets.indent.com (see the CNAME file). All committed files are served publicly, so this file will be accessible at https://assets.indent.com/.mcp.json. While it doesn't contain secrets, it unnecessarily exposes internal dev tooling configuration. Additionally, this repo contains only static image assets with no application code or build system, so there's limited benefit to having MCP tooling configured here. Consider moving this to a code repository where developers would actually use it.

Comment thread .mcp.json
"mcpServers": {
"context7": {
"command": "npx",
"args": ["-y", "@upstash/context7-mcp@latest"]
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unpinned dependency version: Using @latest means the resolved package version can change at any time. A breaking or malicious update could silently affect all users of this config. Pinning to a specific version (e.g., @upstash/context7-mcp@1.0.0) is a minor supply-chain hygiene improvement.

Suggested change
"args": ["-y", "@upstash/context7-mcp@latest"]
"args": ["-y", "@upstash/context7-mcp@<pinned-version>"]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants