About
MCP for the 46a platform.
Remote endpoints: streamable-http: https://46a.co/mcp
Security Report
This MCP server exposes a live browser-session control surface (inject runs arbitrary JavaScript in a user's open 46a session) and a broad REST catalog including account, password, API-key, and subscription endpoints, with several unauthenticated endpoints and a basic-auth path that forwards raw credentials to the remote login API on every request. The inject tool and the wide REST proxy (including the raw proxy endpoint and the 'updateApiKeys' and 'updatePassword' tools) far exceed what a developer-tools connector needs, and the server's own tool descriptions show no confirmation or scoping controls, so the score is driven by these permission and authorization concerns rather than by any single malicious pattern. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).
12 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
46a MCP Server
Live control of a 46a project open in a user's browser, via MCP. Lets an MCP client read live application/DOM state and perform editor actions in real time.
Installation
As an HTTP (configured outside mcpServers)
How to use the MCP connector, for hints ask claude "claude: show me where to configure mcpServers?"
- Add the server URL as a custom connector (claude.ai: Settings → Connectors → Add
custom connector; Claude Code:
claude mcp add --transport http 46a-mcp https://46a.co/mcp).
Configure entry with OAuth
Local claude MCP configuration to use oauth (default)
{
"mcpServers": {
"46a-mcp-http-oauth": {
"type": "streamable-http",
"url": "https://46a.co/mcp"
}
}
}
Configure a entry with basic auth
Local claude MCP configuration to use basic auth instead of oauth.
{
"mcpServers": {
"46a-mcp-http-basic-auth": {
"type": "streamable-http",
"url": "https://46a.co/mcp",
"headers": {
"Authorization": "Basic <user:pass>"
}
}
}
}
Configure stdio process (you probably won't need this)
{
"mcpServers": {
"46a-mcp-stdio": {
"command": "node",
"args": ["src/stdio.js"],
"cwd": "/Users/jroy/src/46a/mcp",
"env": {
"REMOTE_URL": "https://46a.co/mcp",
"EMAIL_OR_USERNAME": "<user>",
"PASSWORD": "<pass>"
}
}
}
}
Running (or this)
node src/http.js
Connecting a client
A. Configure a custom connector, or
B. Add entries (as above) to .mcp.json or other Claude config location, using
either basic auth or OAuth (default), or
C. Configure a local entry for the stdio-based process (see above)
Workflow
listConnections→ pick a liveconnectionId.callToolsand/orinjectagainst thatconnectionId.
connectionId is ephemeral and orphans on page reload — re-list when in doubt.
Tools
Client discovers tools via tools/list.
- listConnections — list live browser connections. Optional
emailOrUsernamefilter. ReturnsconnectionId -> { user, project }. - callTools — run 46a tool calls against one connection:
{ connectionId, request: { v: 't', calls: [...] } }. - inject — run code in the connection's browser session:
{ connectionId, request: { v: 'j', code } }.codemust be a single expression evaluating to a Promise. - hello_world — connectivity test tool.
callTools call surface
request.calls
add_object— add a single object (Circle, Square, _basic.text, _basic.plainText, _basic.html, SVG).add_objects— batched add_object, preferred for creating many objects at once.make_object_from_html— add an object from a raw HTML snippet.getSelectorData— read application state (page, workspace, project, user, objects, logs).doAction— perform an editor action (undo/redo, open editor, select objects, zoom, change page, patch object fields, project/page lifecycle, etc).createImage— generate an image via DALL-E and add it to the project.delegateAI— delegate a task to another assistant.uiInteraction— create a UI widget/interaction in the chat thread or UI.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
