MCP.Market

Yocoolab MCP server

by Jonahbkerr·io.github.Jonahbkerr/yocoolab·v3.0.0·2 stars

Pin visual feedback on any live web page and send it to Claude Code, Cursor or your AI agent.

C58/100grade C
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
Growing

2 stars106 downloads/wk

Reviews

Write one

Nobody has reviewed Yocoolab yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Yocoolab tools (14, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • add_thread_message

    Add a message to a feedback thread without changing its status. Use this to post updates like preview URLs, implementation notes, or questions back to the thread.

  • ai_analyze_page

    Ask the Yocoolab AI assistant to analyze a web page. Supports text questions with optional screenshot (vision) and page context. Useful for getting AI insights about a page layout, accessibility, or code structure.

  • create_pr_for_threadwrite action

    Create a GitHub pull request (or add a commit to the existing working branch) with code changes that address a feedback thread. All fixes for a repo accumulate on a single working branch with one PR.

  • get_ai_conversations

    List recent AI assistant conversations. Returns conversation IDs, page URLs, and message counts.

  • get_companion_messages

    Check for new messages from the AI Companion panel in the Chrome extension. Returns pending messages and clears the queue. Each message includes the user text, page context, and optional screenshot/element attachments.

  • get_deployment_preview

    Check if a preview deployment is available for a specific repo and branch. Returns the preview URL if deployed. Useful after creating a PR to get the live preview link.

  • get_thread_context

    Get full details of a feedback thread including all messages, UI element context (selector, coordinates, element tag), view state, and the annotated screenshot. The screenshot is returned as an image so you can visually see the feedback location.

  • list_open_threads

    List open feedback threads. Omit repo to get ALL threads across every repo you have access to — each result is labeled with its repo, change type (frontend/api/backend), board stage, and UI element context. Use claude_code_pending=true to only show threads that users have sent to Claude Code.

  • mark_thread_addressed
  • pendo_get_feature_usage

    Query Pendo for feature usage analytics (click events, unique visitors) over a time range. Useful for understanding how heavily a feature is used when reviewing feedback threads.

  • pendo_get_page_analytics

    Query Pendo for page-level analytics (page views, unique visitors, avg time on page). Use the page_url from thread context to check how popular a page is.

  • pendo_list_guides

    List active in-app guides from Pendo. Optionally filter by page URL to see what guides are deployed on a specific page.

  • pendo_track_eventwrite action

    Send a custom track event to Pendo. Use this to track actions like feedback resolved, PR created from feedback, or guide suggestions.

  • reply_to_companionwrite action

    Send a reply back to the AI Companion panel in the Chrome extension. The reply will appear as an assistant message in the companion chat UI. Supports Markdown formatting.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 high
  • Code scan58 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 12 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/commands/setup.js: …child_process'); const result = execSync(`pgrep -f "${name}" 2>/dev/null || true`, { encoding:…
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Yocoolab compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 15% of 4,461 AI and agents servers
Tools
14
the typical AI and agents server has 6
Tools that change things
21%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
2
more than 65% of 2,713 AI and agents servers
Downloads a week
106
more than 64% of 1,554 AI and agents servers with a package

What its tools let an agent do: 9 read · 2 create · 2 change · 1 send or post

Release history: 3 versions in the registry since 2026-09-07, latest 2026-10-03, typically one every 26 days.

Install Yocoolab in Claude Code, Cursor or VS Code

Runs npx -y @yocoolab/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add yocoolab -- npx -y @yocoolab/mcp-server
Add to Cursor

What the publisher says

From the Yocoolab repository's README, as published. We do not edit it. Read it on GitHub

@yocoolab/mcp-server

MCP (Model Context Protocol) server that exposes Yocoolab feedback threads, design selections, and activity events as tools for Claude Code and other MCP-compatible clients.

With this installed, your AI coding assistant can:

  • List and triage open design feedback threads on your repo
  • Pull rich context for a thread (selection, screenshot, conversation, files touched)
  • Reply to designers and mark threads as addressed
  • Open PRs that close out feedback threads
  • Inspect element context and selection history from the Yocoolab Chrome extension
  • Read activity summaries, AI conversations, and Pendo product analytics

Install

One command:

npx -y @yocoolab/mcp-server@2 setup

The setup wizard auto-detects your installed AI agents (Claude Code, Cursor, Cline, Roo Code, Windsurf) and writes the correct MCP config for each. Restart your agent and the yocoolab server appears with all tools available.

init is kept as an alias for setup for backwards compatibility with v1.0.x install instructions.

If you'd rather configure manually, the equivalent ~/.mcp.json looks like:

{
  "mcpServers": {
    "yocoolab": {
      "command": "npx",
      "args": ["-y", "@yocoolab/mcp-server@2"],
      "env": {
        "YOCOOLAB_API_URL": "https://app.yocoolab.com",
        "YOCOOLAB_TOKEN": "<your-yocoolab-jwt>",
        "GITHUB_TOKEN": "<your-github-pat>",
        "YOCOOLAB_BRIDGE_PORT": "9800",
        "YOCOOLAB_BRIDGE_WORKSPACE": "/absolute/path/to/your/workspace"
      }
    }
  }
}

The @2 version pin keeps you on the v2 major line — you'll receive bug fixes and new features automatically, but a future v3 with breaking changes won't break your setup. (Pin to @1 if you need Node 18 support — v1.x will receive security patches for 90 days after v2.0.)

Requirements

  • Node.js 20 or newer. We test on Node 20 and 22 in CI. We support whichever Node.js versions are currently in Active LTS or Maintenance LTS status, and drop versions within 30 days of their EOL. Node 18 was dropped in v2.0.0 (EOL April 2025).
  • A Yocoolab account and JWT token — get yours from the Yocoolab Chrome extension settings, or via your account at app.yocoolab.com.
  • A GitHub personal access token with repo scope, if you want to use the PR-creation tools (createprforthread). The token is auto-detected if you have the GitHub CLI installed and authenticated (gh auth login). No GITHUBTOKEN env var needed in that case. Otherwise, create one at github.com/settings/tokens/new?scopes=repo.

Configuration

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Yocoolab: common questions

Is Yocoolab MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the Yocoolab safety report
How do I install Yocoolab?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Yocoolab need an API key?
Yes. The registry entry asks for YOCOOLAB_TOKEN, GITHUB_TOKEN.
Is Yocoolab maintained?
The last commit was 33 days ago (2026-10-03). The latest release is v3.0.0.
What can I use instead of Yocoolab?
Servers from other publishers that do the same job: Robin: AI-Powered Dark Web OSINT MCP server, Charlotte MCP server and agent-device MCP server.
How does Yocoolab compare with other AI and agents MCP servers?
safety score 58/100 (higher than 15% of 4,461 AI and agents servers); tools 14 (the typical AI and agents server has 6); tools that change things 21% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Yocoolab

Same job from other publishers: the closest match first, then the best rated.

  • Robin: AI-Powered Dark Web OSINT
    Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
    A
  • Charlotte
    Renders web pages into structured, agent-readable representations using headless Chromium.
    A
  • agent-device
    Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP
    A
  • Agent-Native Plan
    Structured visual plans and PR recaps with diagrams, prototypes, annotations, and sharing
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B