Shadcn UI MCP Server
by JpisniceA mcp server to allow LLMS gain context about shadcn ui component structure,usage and installation,compaitable with react,svelte 5,vue & React Native
Shadcn UI MCP Server is an open-source mcp server by Jpisnice, written mainly in TypeScript, with 3,076 GitHub stars and the MIT license. Its code was last updated Oct 3, 2026.
Scan summary: scanned Nov 5, 2026 at commit 30efb8a. Seen able to run shell commands, run dynamic code, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
30efb8a · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings. BuildsIt installed from a fresh machine. BootsIt started, and MCP servers answered the protocol handshake. ReproducibleEarned in this scan.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit12 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.BuildpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Boot & handshake10 toolspassPassed. This check ran and found nothing it flags.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.Reproducible (×3)passPassed. This check ran and found nothing it flags.
Findings (16)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/bump-version.js:54 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/bump-version.js:55 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/bump-version.js:56 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.8: 1 known vulnerabilityGHSA-27r3-jxmh-p828
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.1: 1 known vulnerabilityGHSA-mrwp-f3q8-3g9p
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joi@17.13.8: 1 known vulnerabilityGHSA-4528-x5fx-h6hg
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@6.29.0: 5 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.6.5: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesdownloads.snyk.io
- lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header2 matches in this file
docs/getting-started/github-token.md:91 - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.17: 1 known vulnerabilityGHSA-rmxm-3fg6-px4f
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 1 known vulnerabilityGHSA-6pq8-jhm2-2vcw
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
downloads.snyk.ioregistry.npmjs.org
While running
No connections
Tools exposed (10)
get_componentGet the source code for a specific shadcn/ui v4 component
get_component_demoGet demo code illustrating how a shadcn/ui v4 component should be used
list_componentsGet all available shadcn/ui v4 components
get_component_metadataGet metadata for a specific shadcn/ui v4 component
get_directory_structureGet the directory structure of the shadcn-ui v4 repository
get_blockGet source code for a specific shadcn/ui v4 block (e.g., dashboard-01, login-02, sidebar-01)
list_blocksGet all available shadcn/ui v4 blocks with categorization
apply_themeApply a TweakCN theme preset to the project
list_themesList available tweakcn themes
get_themeGet details of a specific tweakcn theme
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Shadcn UI MCP Server alternatives
View more →Similar mcp servers in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Shadcn UI MCP Server (this page) Jpisnice | 3.1k | MIT | Oct 3, 2026 | Scanned, no flagged issues |
| Next AI Draw Io DayuanJiang | 37k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP For Blender ahujasid | 33k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Figma Context MCP GLips | 16k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Nginx UI 0xJacky | 12k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Lamda firerpa | 8.7k | MIT | Sep 27, 2026 | Scanned, no flagged issues |