MCP.Market

SPOC MCP server

by SPOC-App·io.github.SPOC-App/mcp-bridge·v0.1.3

stdio bridge for the SPOC MCP server — for Claude Desktop, Cursor, Zed

B75/100grade B
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

0 stars43 downloads/wk

Reviews

Write one

Nobody has reviewed SPOC yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SPOC tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan9 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 40 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How SPOC compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,255 servers
Downloads a week
43
more than 35% of 12,191 servers with a package

Install SPOC in Claude Code, Cursor or VS Code

Runs npx -y @spocapp/mcp-bridge on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-bridge -- npx -y @spocapp/mcp-bridge
Add to Cursor

What the publisher says

From the SPOC repository's README, as published. We do not edit it. Read it on GitHub

@spocapp/mcp-bridge

Small stdio bridge that lets Claude Desktop, Cursor, Zed, Windsurf and other stdio-only MCP clients talk to the SPOC MCP server at spoc.com/mcp/rpc.

  • npm: @spocapp/mcp-bridge
  • MCP Registry: io.github.SPOC-App/mcp-bridge
  • Live server: https://spoc.com/mcp/rpc — reports itself as spoc / 1.27.0

What this is (and isn't)

Most current MCP clients only speak the stdio transport — JSON-RPC over a subprocess's stdin/stdout. SPOC's MCP server speaks HTTP+SSE so it can serve many clients at once. This bridge is the shim between the two: install it, point your MCP client at it, and SPOC's tools appear in the client's tool picker.

It is not a rewrite of the MCP protocol, and it doesn't cache, batch, or reinterpret requests. Every JSON-RPC frame goes through unchanged. If you need behaviour that differs from what the bridge does today, it's usually easier to fix in SPOC itself than in the shim.

Install

You don't need to install it — most MCP clients will fetch it on demand with npx:

npx -y @spocapp/mcp-bridge

Or install it once and point clients at the binary:

npm install -g @spocapp/mcp-bridge
which spoc-mcp-bridge

Configure your MCP client

Claude Desktop

Edit the config file:

  • macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json
  • Windows: %APPDATA%\Claude\claudedesktopconfig.json
{
  "mcpServers": {
    "spoc": {
      "command": "npx",
      "args": ["-y", "@spocapp/mcp-bridge"],
      "env": {
        "SPOC_BEARER": "spk_live_..."
      }
    }
  }
}

Restart Claude Desktop. SPOC's tools should appear in the tool picker within a few seconds.

Cursor

~/.cursor/mcp.json (or Settings → MCP → Edit mcp.json):

{
  "mcpServers": {
    "spoc": {
      "command": "npx",
      "args": ["-y", "@spocapp/mcp-bridge"],
      "env": { "SPOC_BEARER": "spk_live_..." }
    }
  }
}

Zed

~/.config/zed/settings.json:

{
  "context_servers": {
    "spoc": {
      "command": {
        "path": "npx",
        "args": ["-y", "@spocapp/mcp-bridge"],
        "env": { "SPOC_BEARER": "spk_live_..." }
      }
    }
  }
}

Windsurf, Continue, etc.

Any client that speaks the MCP stdio transport works the same way. Set the command to npx -y @spocapp/mcp-bridge and pass a bearer via environment.

Environment variables

Bearer tokens

Generate one at https://spoc.com/settings/api-keys. Make sure the harness:issue scope is checked or SPOC will reject calls that need to issue harnesses.

Anonymous access works for read-only tools that don't need a principal. Bearer is only required for tools that act on behalf of an identity.

Smoke test

Confirm the bridge and the upstream are both healthy:

npx -y @spocapp/mcp-bridge <<< '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}'

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

SPOC: common questions

Is SPOC MCP server safe?
Mostly: it is graded B (75/100). Read the SPOC safety report
How do I install SPOC?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does SPOC need an API key?
Yes. The registry entry asks for SPOC_BEARER.
Is SPOC maintained?
The last commit was 45 days ago (2026-09-20). The latest release is v0.1.3.
How does SPOC compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,255 servers); downloads a week 43 (more than 35% of 12,191 servers with a package). Full comparison.