Log inSubmit server
Venira MCP logo

Venira MCP

Workspace-scoped MCP tools for coding agents, including file operations, search, shell commands, CI/CD, and optional JavaScript execution.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Venira MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "venira-mcp": {
      "command": "npx",
      "args": [
        "--yes",
        "--package=venira-mcp@latest",
        "venira-mcp"
      ],
      "env": {
        "VENIRA_WORKSPACE": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Automated check passed— started and listed 32 tools correctly (Today).

Overview

venira-mcp provides coding agents with workspace-scoped tools for inspecting and modifying project files, searching content, checking project health, and running shell commands. It supports default and expert tool sets, with optional JavaScript execution controlled separately by an environment variable. The server runs through Node and npx over a local stdio configuration, and records tool activity for auditing. Reach for it when an agent needs direct project operations with configurable shell and filesystem guard rails.

Use cases

  • Inspect and edit files across a project workspace
  • Search source content and read selected line ranges
  • Run approved shell commands from a coding agent
  • Add CI/CD operations to an expert coding workflow
  • Execute project JavaScript with configurable containment

Key features

  • Workspace-scoped file operations
  • Batch and line-range file reads
  • Content search and code intelligence
  • Configurable shell command policy
  • Optional CI/CD and JavaScript tools
  • Audited tool calls

Tools32

What Venira MCP lets your agent do. Expand a tool for its parameters.

Verified live~11.4k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

What it can do

From the 32 tools this server returned when we ran it; 32 declare their own safety hints.

Runs commands · 5Can delete or modify data · 9Writes files · 5Handles credentials · 2Makes network requests · 2Read-only tools · 19
Unusual tool instructions. 1 tool description contain text aimed at the AI model rather than at you (reaches for local secrets). Read the tool descriptions before connecting.
Network at startup3 connections
Files written at startup4
Install scriptsNone
npm provenanceSigned build
Package age14 days
Maintainers1

Observed 2026-11-11 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 9h ago via OSV.dev · venira-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads7.5kPackage downloads in the last 30 days.
Last commit1d agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed32Callable tools this server registers over MCP.

How Venira MCP works

What venira-mcp MCP server does

venira-mcp exposes project-management and coding tools to MCP-compatible agents. Its workspace-scoped file tools can read, write, edit, delete, and inspect files; read multiple files in one call; retrieve line ranges; search file contents; and identify recently used files. The available coding tools also include project health checks and code-intelligence operations.

Tool availability depends on the selected mode. Default mode provides 32 coding tools plus shell access and excludes CI/CD operations. Expert mode expands the set to 43 tools by adding CI/CD capabilities. Enabling JavaScript execution adds project_execute_js, producing 33 tools in default mode or 44 in expert mode.

How it works

The server runs as a local Node process, commonly started through npx --yes venira-mcp@latest. MCP clients connect to it over their local stdio server configuration. The workspace path is supplied through VENIRA_WORKSPACE, and the file tools use that path as their scope unless restrictions are explicitly disabled.

Shell commands are evaluated under a configurable policy. Rules can allow, request approval for, or deny commands, and calls are audited. The security profile controls the default shell behavior: strict favors read-only and workspace-local operations, balanced is the general-purpose default, trusted is more permissive, and off disables shell checks with a warning.

JavaScript execution is independently controlled. The ask mode requires approval for each call, semi-auto keeps containment while removing per-call approval, and auto removes that containment as well.

Setup and configuration

Install it from a project directory with:

Terminal
npx --yes venira-mcp@latest --install auto --workspace .

After installation, restart the MCP client and call project_health to verify the connection. Manual configurations are documented for VS Code, OpenCode, Claude Desktop, Cursor, and Codex. These configurations use the same npx command and set the workspace, tool mode, output mode, and security profile.

The main settings are VENIRA_WORKSPACE, VENIRA_TOOL_MODE, VENIRA_OUTPUT_MODE, and VENIRA_SECURITY_PROFILE. VENIRA_DATA_DIR can place Venira's local data in a chosen writable directory. VENIRA_SHELL_MODE overrides the shell policy selected by the security profile, while VENIRA_UNRESTRICTED=1 removes workspace path restrictions and should not be used in production.

Tools and capabilities

  • Read, write, edit, delete, and inspect workspace files.
  • Read batches of files or selected line ranges.
  • Search project content and retrieve recent files.
  • Run shell commands under configurable approval rules.
  • Use project health and code-intelligence tools.
  • Add CI/CD operations in expert mode.
  • Optionally execute project JavaScript with selectable approval and containment.
  • Audit tool calls and shell activity.

Limitations and notes

Venira provides guard rails and an audit trail, not a sandbox. It runs with the privileges of the operating-system user that starts it. Workspace restrictions apply to file tools, but shell commands are governed separately and may still cause harmful effects if the active policy permits them.

JavaScript execution in auto mode has full network and filesystem access and inherits the environment. Anything running as the same OS user may also read keys stored in VENIRA_DATA_DIR. For untrusted workspaces or situations requiring a genuine isolation boundary, run the server inside a container or virtual machine.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Venira MCP

venira-mcp is an MCP server that connects coding agents such as Claude Desktop, Cursor, VS Code, OpenCode, and Codex to a project workspace. Its main tools handle file reads and edits, batch and line-range reads, content search, project health, shell commands, and optional CI/CD or JavaScript execution.

Install it with `npx --yes venira-mcp@latest --install auto --workspace .` from the project directory. Restart the client afterward, then call `project_health` to verify the connection.

Yes, venira-mcp works with Cursor through its local MCP configuration. Add the npx command and set values such as `VENIRA_WORKSPACE`, `VENIRA_TOOL_MODE`, `VENIRA_OUTPUT_MODE`, and `VENIRA_SECURITY_PROFILE` in Cursor's MCP settings.

Set `VENIRA_JS_EXEC_MODE` to `ask`, `semi-auto`, or `auto`; the default `off` setting hides the JavaScript tool. `ask` requires approval per call, `semi-auto` retains containment without approval, and `auto` removes containment.

No, venira-mcp is not a sandbox. It runs with the starting OS user's privileges, and shell policy does not isolate every command. Use a container or virtual machine when a real isolation boundary is required.

Related MCP servers

All in Coding Agents All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewVenira MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/venira-mcp?style=directory)](https://allmcps.com/mcp/venira-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/venira-mcp"><img src="https://allmcps.com/api/badge/venira-mcp?style=directory" alt="Venira MCP on AllMCPs" /></a>