A CLI and MCP server to preview, build, and integrate AI-generated UI designs from Google Stitch into your local development workflow and coding agents.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
vite: `server.fs.deny` bypass on Windows alternate paths
Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket
Vite: `server.fs.deny` bypassed with queries
process.env. You'll be asked to provide them before it can run.CLOUDSDK_COMPONENT_MANAGER_DISABLE_UPDATE_CHECKCLOUDSDK_CONFIGCLOUDSDK_CORE_DISABLE_PROMPTSCLOUDSDK_CORE_DISABLE_USAGE_REPORTINGCLOUD_SHELLDISPLAYGOOGLE_CLOUD_PROJECT— Alternative project ID variableSSH_CLIENTSSH_CONNECTIONSSH_TTYSTITCH_API_KEY— API key: Set the environment variable to skip OAuth entirely.STITCH_HOST— Custom Stitch API endpointSTITCH_PROJECT_ID— Override project IDSTITCH_USE_SYSTEM_GCLOUD— Then use the proxy with =1:WAYLAND_DISPLAY[](https://m8ven.ai/mcp/ayemish-stitch-mcp-wveh7c)