io.github.hampsterx/claude-mcp-bridge

NPM · CLAUDE-MCP-BRIDGE · SCANNED AUG 3

Wraps Claude Code CLI as MCP tools: query, search, structured, ping, listSessions.

Available components

−5 this week 38 38 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security63

No malware found by supply-chain analysis.Pass
CVE data not yet available for this package.Unverified
No install/post-install scripts declared.Pass
Dependency-health data not yet available.Unverified

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to hampsterx/claude-mcp-bridge). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 0 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability0

Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified

Stability & Change Management0

Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified

Tool Coverage0

Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.Unverified

Capabilities0

Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.Unverified

Unverified: 4 categories

Categories scored 0 because our sandbox run of this package has not given us the schema these checks need to read. That is a gap on our side rather than a finding about the package, and we only credit what we can confirm, so the score stands at 0 until the capture succeeds. We are working through the fleet, so this normally clears without any action from you. How we score packages →

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · claude-mcp-bridge

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add hampsterx-claude-mcp-bridge -- npx -y claude-mcp-bridge

# add to Codex CLI

codex mcp add hampsterx-claude-mcp-bridge -- npx -y claude-mcp-bridge

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "hampsterx-claude-mcp-bridge": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "claude-mcp-bridge"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add hampsterx-claude-mcp-bridge --command npx --arg -y --arg claude-mcp-bridge

# ~/.hermes/config.yaml

mcp_servers:
  hampsterx-claude-mcp-bridge:
    command: "npx"
    args: ["-y", "claude-mcp-bridge"]

// mcp.json

{
  "mcpServers": {
    "hampsterx-claude-mcp-bridge": {
      "command": "npx",
      "args": [
        "-y",
        "claude-mcp-bridge"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 −38
- Stability: 0.23 → unverified ▼ security
- Known CVEs: partial → unverified ▼ security
- Dependency health: partial → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- First check of Schema quality: unverified functional
- Package version: 0.7.0 → 0.7.1 functional
2 Aug 26 +58
- Install scripts: unverified → pass ▲ security
- Provenance: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- The attested source repository moved: hampsterx/claude-mcp-bridge security
- Tool coverage: 100 → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → good ▲ functional
- First check of Schema quality: unverified functional
- Licence: MIT functional
31 Jul 26 −7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 43

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: hampsterx/claude-mcp-bridge
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/hampsterx/claude-mcp-bridge/.github/workflows/publish.yml@refs/tags/v0.7.1
Rekor log index:: 2331533993
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:21aff9b850db8e86cb0942d5dc2a0ce18c5a658fb1ae601cb5815f3acc241e6fe470e8f79fbbcfa7830c4adf7a5f116321aee691e42be42660e35d4b2
Discovery method:: attestation_endpoint

MCP tools — 5 exposed · ~1,041 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

listSessions List Sessions ~57

List active Claude CLI sessions tracked by this server. Returns session metadata (IDs, models, timing, turn counts, cumulative cost) for orchestration. Use to check available sessions before resuming with sessionId. No cost (local lookup only).

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

ping Health Check ~33

Health check: verifies Claude CLI is installed and authenticated, reports versions, capabilities, and configuration. No cost (local check only).

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

query Claude Query ~415

Execute a prompt via Claude Code CLI with optional file context and session resume. Claude is an AI coding agent that can generate, analyze, refactor, and explain code. Capabilities: code generation and refactoring, code analysis and explanation, file understanding (text and images), multi-turn conversations via sessionId. Cost: Default model is Sonnet (~$0.01-0.10/call). Use effort="low" for simple tasks, effort="high" + model="opus" for complex analysis. Set maxBudgetUsd to cap per-call cost (recommended for effort="max" or model="opus"). Tips: - Set workingDirectory to the target repo for project-aware responses. - Break complex tasks into focused prompts rather than one large request. - Resume multi-turn conversations with sessionId from a previous response's metadata. - Include relevant files via the files parameter for targeted context (text files inlined in prompt, images trigger allowed-tools mode). - Use noSessionPersistence=true for stateless one-shot calls.

Input Output Examples

Name	Type	Req	Description
effort	string	—	Effort level: low, medium, high, or max (passed to --effort)
files	array	—	File paths (text or images) relative to workingDirectory
maxBudgetUsd	number	—	Maximum cost budget in USD for this call (passed to --max-budget-usd)
maxResponseLength	integer	—	Soft limit on response length in words
model	string	—	Model alias or full Claude model name
noSessionPersistence	boolean	—	Disable session persistence for ephemeral print calls
prompt	string	yes	The prompt to send to Claude
resetSession	boolean	—	Clear stored session state before execution (use with sessionId to start fresh)
sessionId	string	—	Claude session ID to resume with --resume
timeout	number	—	Timeout in milliseconds (default: 60000, image queries: 120000)
workingDirectory	string	—	Working directory for file resolution and CLI execution

No output schema declared.

No examples provided.

search Web Search ~261

Web search via Claude Code CLI using WebSearch and WebFetch tools. Searches the web and synthesizes a comprehensive answer with source URLs. Use for: current information, documentation lookups, API references, comparing libraries, and research questions. Cost: Typically ~$0.02-0.05/search with Sonnet. Tips: - Ask specific, focused questions for best results. - Results include source URLs for verification. - Use maxResponseLength to control response verbosity. - Increase timeout for complex research queries that may require multiple web fetches.

Input Output Examples

Name	Type	Req	Description
effort	string	—	Effort level: low, medium, high, or max (default: medium for search)
maxBudgetUsd	number	—	Maximum cost budget in USD for this call (passed to --max-budget-usd)
maxResponseLength	integer	—	Soft limit on response length in words
model	string	—	Model alias or full Claude model name
noSessionPersistence	boolean	—	Disable session persistence for ephemeral print calls
query	string	yes	Search query or question
sessionId	string	—	Claude session ID to resume with --resume
timeout	number	—	Timeout in milliseconds
workingDirectory	string	—	Working directory for the CLI

No output schema declared.

No examples provided.

structured Structured Output ~275

Generate JSON conforming to a provided JSON Schema. Uses Claude CLI's native --json-schema flag for validated output (not client-side validation). Use for: data extraction from text/files, classification, entity parsing, or any task needing machine-parseable output. Cost: Similar to query (~$0.01-0.10/call). Schema complexity doesn't significantly affect cost. Tips: - Pass the JSON Schema as a JSON string in the schema parameter. - Schema max size: 20KB. Keep schemas focused for reliable output. - For extraction tasks, include source text via the files parameter or inline in the prompt.

Input Output Examples

Name	Type	Req	Description
files	array	—	Text file paths to include as context
maxBudgetUsd	number	—	Maximum cost budget in USD for this call (passed to --max-budget-usd)
model	string	—	Model alias or full Claude model name
noSessionPersistence	boolean	—	Disable session persistence for ephemeral print calls
prompt	string	yes	What to generate or extract
schema	string	yes	JSON Schema as a JSON string
sessionId	string	—	Claude session ID to resume with --resume
timeout	number	—	Timeout in milliseconds (default: 60000)
workingDirectory	string	—	Working directory for file resolution and CLI execution

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug