Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions .mcp.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dev config will be publicly served: This repository is deployed via GitHub Pages at assets.indent.com (see the CNAME file). All committed files are served publicly, so this file will be accessible at https://assets.indent.com/.mcp.json. While it doesn't contain secrets, it unnecessarily exposes internal dev tooling configuration. Additionally, this repo contains only static image assets with no application code or build system, so there's limited benefit to having MCP tooling configured here. Consider moving this to a code repository where developers would actually use it.

"mcpServers": {
"context7": {
"command": "npx",
"args": ["-y", "@upstash/context7-mcp@latest"]
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unpinned dependency version: Using @latest means the resolved package version can change at any time. A breaking or malicious update could silently affect all users of this config. Pinning to a specific version (e.g., @upstash/context7-mcp@1.0.0) is a minor supply-chain hygiene improvement.

Suggested change
"args": ["-y", "@upstash/context7-mcp@latest"]
"args": ["-y", "@upstash/context7-mcp@<pinned-version>"]

}
}
}