4da MCP server
{
"mcpServers": {
"4da-systems": {
"command": "npx",
"args": [
"-y",
"@4da/mcp-server@latest"
]
}
}
}{
"mcpServers": {
"4da-systems": {
"command": "npx",
"args": [
"-y",
"@4da/mcp-server@latest"
]
}
}
}{
"mcpServers": {
"4da-systems": {
"command": "npx",
"args": [
"-y",
"@4da/mcp-server@latest"
]
}
}
}{
"servers": {
"4da-systems": {
"command": "npx",
"args": [
"-y",
"@4da/mcp-server@latest"
]
}
}
}{
"mcpServers": {
"4da-systems": {
"command": "npx",
"args": [
"-y",
"@4da/mcp-server@latest"
]
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @4da/mcp-serverversion 5.0.2
What it does
4DA is a local-first MCP server that scans your codebase and scores technical content (articles, advisories, releases) against your actual dependencies and stack. It surfaces relevant information through multi-axis scoring and LLM verification, filtering out noise without sending your code or preferences to external servers.
- Get vulnerability alerts and CVE scanning results for your specific installed dependencies.
- Receive filtered technical content and ecosystem updates relevant to your exact tech stack, rejecting noise.
- Plan dependency upgrades by understanding which libraries need attention based on your codebase.
Tools this server exposes
| Tool | Does |
|---|---|
| scan_codebase | Analyzes your project files (Cargo.toml, package.json, go.mod, Git history) to detect your tech stack and dependencies. |
| score_content | Evaluates articles, advisories, and releases from 20+ sources against your codebase using five independent signal axes. |
| verify_relevance | Uses an LLM to verify top-scored items against your full developer context with a 1-5 rubric. |
| get_brief | Returns the current filtered feed of relevant content and signals scored against your stack. |
| manage_preferences | Lets you save, dismiss, pin, or forget items to build a preference profile that teaches the scoring engine. |
| cve_scan | Scans your dependencies for known security vulnerabilities. |
| health_check | Evaluates the health status of your dependencies. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.