
Yocoolab
io.github.JonahbkerrPublished by GitHub account Jonahbkerrv3.0.0Updated Oct 25, 2026
Pin visual feedback on any live web page and send it to Claude Code, Cursor or your AI agent.
Overview
Yocoolab's local MCP server lets an AI coding assistant read, reply to and close design feedback threads pinned on live web pages, and inspect selections from a
- What you can do
- List and triage open design feedback threads, pull a thread's context (selection, screenshot, conversation, files touched), reply to designers and mark threads addressed, and open PRs that close them out (with GitHub-connected workspaces).
- When to use it
- Use it when your team pins visual feedback on live pages through Yocoolab and you want your coding agent to work through those threads inside your editor. The README says most people should use the hosted Yocoolab MCP instead; this package is for the local bridge on port 9800 that streams live selections from the Chrome extension.
- Requirements
- Node.js 20 or newer, run via npx. A Yocoolab account and JWT in YOCOOLAB_TOKEN for thread tools. A GitHub personal access token with repo scope in GITHUB_TOKEN, or an authenticated gh CLI, only for PR creation. Optional: YOCOOLAB_API_URL, YOCOOLAB_BRIDGE_PORT (default 9800), YOCOOLAB_BRIDGE_WORKSPACE. Desktop only.
Installation
In SourceWeft
- Open Yocoolab in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@yocoolab/mcp-server
[npm version] [npm downloads] [CI] [License] [Node] [Types] [OpenSSF Best Practices]
MCP (Model Context Protocol) server that exposes Yocoolab feedback threads and design selections as tools for Claude Code and other MCP-compatible clients.
With this installed, your AI coding assistant can:
- List and triage open design feedback threads on your repo
- Pull rich context for a thread (selection, screenshot, conversation, files touched)
- Reply to designers and mark threads as addressed
- Open PRs that close out feedback threads
- Inspect element context and selection history from the Yocoolab Chrome extension
- Read companion chat messages, AI conversations, and Pendo product analytics
Recommended: the hosted Yocoolab MCP (nothing to install)
Most people no longer need this package. Yocoolab hosts the MCP server at https://app.yocoolab.com/mcp. Your agent signs in to Yocoolab in the browser the first time, so there is no token to paste:
Then type /mcp in Claude Code, choose yocoolab, and Authenticate. Setup for Cursor, VS Code, the Claude app, and headless agents (agent token in a header) is at app.yocoolab.com/connect.
Always-on agent: to have one computer pick up every Send to Agent in your workspace by itself (it runs Claude Code), run this on that computer:
Switching from this package to the hosted server? Remove the old entry first (claude mcp remove yocoolab, repeat until none is found). Otherwise Claude may keep using the old one.
Use this package only if you need what runs on your own machine: the local bridge on :9800 for live selections from the Chrome extension.
Install (local package)
One command:
The setup wizard auto-detects your installed AI agents (Claude Code, Cursor, Cline, Roo Code, Windsurf) and writes the correct MCP config for each. Restart your agent and the yocoolab server appears with all tools available.
initis kept as an alias forsetupfor backwards compatibility with v1.0.x install instructions.
If you'd rather configure manually, the equivalent ~/.mcp.json looks like:
The @3 version pin keeps you on the v3 major line — you'll receive bug fixes and new features automatically, but a future v4 with breaking changes won't break your setup. v3.0.0 removed the activity monitor and no longer writes Claude Code hooks into ~/.claude/settings.json; see CHANGELOG.md if you are upgrading from v2.
Requirements
- Node.js 20 or newer. We test on Node 20 and 22 in CI. We support whichever Node.js versions are currently in Active LTS or Maintenance LTS status, and drop versions within 30 days of their EOL. Node 18 was dropped in v2.0.0 (EOL April 2025).
- A Yocoolab account and JWT token — get yours from the Yocoolab Chrome extension settings, or via your account at app.yocoolab.com.
- A GitHub personal access token with
reposcope, if you want to use the PR-creation tools (create_pr_for_thread). The token is auto-detected if you have the GitHub CLI installed and authenticated (gh auth login). NoGITHUB_TOKENenv var needed in that case. Otherwise, create one at github.com/settings/tokens/new?scopes=repo.
Configuration
CLI
The mcp-server command is a synonym for yocoolab-mcp. Either works.
Tools
The server exposes tools across several categories:
- Threads —
list_open_threads,get_thread_context,add_thread_message,mark_thread_addressed,create_pr_for_thread- On a link-only project (no GitHub App connection) open the PR with your own git/
gh, then callmark_thread_addressedwithpr_url(andpr_branch,preview_urlwhen you have them). The PR fields land on the thread and the preview link goes into the review message;get_thread_contextprints the project's repo links so you know which repository it points at.create_pr_for_threadremains for GitHub-connectedowner/nameworkspaces.
- On a link-only project (no GitHub App connection) open the PR with your own git/
- Selection / Bridge —
get_latest_selection,get_selection_history,get_element_context,find_source_for_selection,ai_analyze_page - Companion —
get_companion_messages,reply_to_companion - AI —
get_ai_conversations - Deployment —
get_deployment_preview - Pendo (optional) —
pendo_list_guides,pendo_page_analytics,pendo_feature_usage,pendo_track_event
For full tool descriptions and parameters, your MCP client will list them after the server starts.
Troubleshooting
yocoolab-mcp: command not found — make sure you're on v1.0.1 or newer. Run npx -y @yocoolab/mcp-server@latest setup to get the current release.
[yocoolab] Warning: YOCOOLAB_TOKEN not set — thread feedback tools are disabled without a token, but bridge / companion / selection tools still work. To enable everything, run yocoolab-mcp setup to (re)generate the config with your JWT.
Tools don't appear in your agent after install — restart your agent completely (quit & reopen). MCP servers load at startup.
Port 9800 is already in use — another instance of the MCP server is running, or another app has the port. Set YOCOOLAB_BRIDGE_PORT to a different value (e.g. 9801) in your .mcp.json.
Verbose diagnostic logs — set DEBUG=yocoolab:* in your env block. All diagnostic output goes to stderr (so it doesn't interfere with the MCP stdio protocol on stdout).
PR creation says "GitHub token not configured" — the create_pr_for_thread tool needs a GitHub token. Two ways to fix:
- Auto-detect (easiest): install the GitHub CLI and run
gh auth login. The server picks up the token automatically. - Manual: create a personal access token with
reposcope and addGITHUB_TOKEN: "ghp_..."to your MCP config'senvblock. If your config has a placeholder value like<your GitHub PAT>, the server detects it and shows a helpful message instead of crashing with a 401.
Support
- Documentation: this README, plus inline tool descriptions visible in your MCP client
- Bug reports: github.com/Yocoolab/mcp-server/issues (use the bug template)
- Security issues: see SECURITY.md — do not open a public issue
- Other questions: [email protected]
Development
See CONTRIBUTING.md for the full contributor workflow.
Security & supply chain
- Released with npm provenance — every published version is cryptographically signed by GitHub Actions OIDC, traceable back to the exact commit and workflow run.
- Each release ships with a CycloneDX SBOM attached to the GitHub Release.
- We run
npm audit signaturesand CodeQL static analysis in CI on every PR. - See SECURITY.md for vulnerability reporting.
License
Apache 2.0 — © 2026 Yocoolab
Source: README.md at commit 0dbf167
Tools
0Version history
2- v3.0.0LatestOct 3, 2026
- v2.4.3Sep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts