Corsair

Name: Corsair
Author: corsairdev

Reaches 200+ third-party app APIs through Corsair's plugins, using three discovery and script tools

By corsairdev TypeScript Local · stdio Developer tools Productivity Communication

GitHub npm Website

38 popularity score ★ 16k ↓ 54/wk

Connect your client

Local (npm)

Add in one click

Add to Cursor Add to VS Code Add to LM Studio

Opens the app, which asks before it adds the server. Then replace each <NAME> in its settings with your value.

Or add it by command or config

It needs CORSAIR_KEK, CORSAIR_API_KEY, CORSAIR_SIGNING_SECRET, CORSAIR_PLUGINS. Replace each <NAME> with your value.

FirstTerminal

npm install -g @corsair-dev/mcp better-sqlite3 @corsair-dev/<PLUGIN>

Claude CodeTerminal

claude mcp add corsair -e CORSAIR_KEK=<CORSAIR_KEK> -e CORSAIR_API_KEY=<CORSAIR_API_KEY> -e CORSAIR_SIGNING_SECRET=<CORSAIR_SIGNING_SECRET> -e CORSAIR_PLUGINS=<CORSAIR_PLUGINS> -- corsair-mcp

Claude Desktopclaude_desktop_config.json

{
  "mcpServers": {
    "corsair": {
      "command": "corsair-mcp",
      "args": [],
      "env": {
        "CORSAIR_KEK": "<CORSAIR_KEK>",
        "CORSAIR_API_KEY": "<CORSAIR_API_KEY>",
        "CORSAIR_SIGNING_SECRET": "<CORSAIR_SIGNING_SECRET>",
        "CORSAIR_PLUGINS": "<CORSAIR_PLUGINS>"
      }
    }
  }
}

Cursor~/.cursor/mcp.json

{
  "mcpServers": {
    "corsair": {
      "command": "corsair-mcp",
      "args": [],
      "env": {
        "CORSAIR_KEK": "<CORSAIR_KEK>",
        "CORSAIR_API_KEY": "<CORSAIR_API_KEY>",
        "CORSAIR_SIGNING_SECRET": "<CORSAIR_SIGNING_SECRET>",
        "CORSAIR_PLUGINS": "<CORSAIR_PLUGINS>"
      }
    }
  }
}

VS Code.vscode/mcp.json

{
  "servers": {
    "corsair": {
      "type": "stdio",
      "command": "corsair-mcp",
      "args": [],
      "env": {
        "CORSAIR_KEK": "<CORSAIR_KEK>",
        "CORSAIR_API_KEY": "<CORSAIR_API_KEY>",
        "CORSAIR_SIGNING_SECRET": "<CORSAIR_SIGNING_SECRET>",
        "CORSAIR_PLUGINS": "<CORSAIR_PLUGINS>"
      }
    }
  }
}

Codex~/.codex/config.toml

[mcp_servers.corsair]
command = "corsair-mcp"
args = []

[mcp_servers.corsair.env]
CORSAIR_KEK = "<CORSAIR_KEK>"
CORSAIR_API_KEY = "<CORSAIR_API_KEY>"
CORSAIR_SIGNING_SECRET = "<CORSAIR_SIGNING_SECRET>"
CORSAIR_PLUGINS = "<CORSAIR_PLUGINS>"

Gemini CLITerminal

gemini mcp add --scope user -e CORSAIR_KEK=<CORSAIR_KEK> -e CORSAIR_API_KEY=<CORSAIR_API_KEY> -e CORSAIR_SIGNING_SECRET=<CORSAIR_SIGNING_SECRET> -e CORSAIR_PLUGINS=<CORSAIR_PLUGINS> corsair corsair-mcp

Settings 7

`CORSAIR_KEK`	Required: Key-encryption key that protects the stored credentials.
`CORSAIR_API_KEY`	Required: Corsair Hub project API key.
`CORSAIR_SIGNING_SECRET`	Required: Corsair Hub signing secret; Hub needs it together with the API key.
`CORSAIR_PLUGINS`	Required: Comma-separated plugins to load, e.g. slack,github; each package must be installed.
`CORSAIR_DB_PATH`	Optional: SQLite file for credentials and synced data; ./corsair.db by default.
`CORSAIR_READONLY`	Optional: Set to true to block write and destructive Corsair endpoints.
`CORSAIR_MULTITENANCY`	Optional: Set to true to store accounts per tenant.

What it does

Corsair is an open-source integration layer: each third-party service (Slack, GitHub and the others in its catalog) is a plugin package, and Corsair keeps the OAuth tokens, refreshes them and handles webhooks for you. The @corsair-dev/mcp package puts that layer behind MCP. Most of the package is adapters for agent frameworks (Mastra, LangChain, LlamaIndex, OpenAI, Vercel AI, Claude). It also has a runStdioMcpServer function and a ready-made stdio program, corsair-mcp.

The server does not list one tool per endpoint. It gives the assistant three tools: one lists the operations the loaded plugins offer, one returns the parameter schema for a single operation, and one runs a JavaScript snippet with a `corsair` object in scope. Calls are made inside that snippet, which can also filter results before returning them. If you add a plugin, its endpoints become available without any code changes.

The corsair-mcp program reads all of its settings from the environment (see the header of src/bin.ts). It needs a Hub project API key and signing secret, a key-encryption key, and a comma-separated CORSAIR_PLUGINS list. It loads each plugin in managed-auth mode and stores credentials and synced data in a local SQLite file, ./corsair.db by default. The README does not say that the program exits at start-up if better-sqlite3 or a listed plugin package is not installed next to it. It also starts the Hub connection with its dev tunnel turned off so that nothing is written to stdout, which carries the MCP messages.

What it needs

Runtime	Node.js

Node.js with npx. A Corsair Hub project, whose Keys tab gives the API key and signing secret. A key-encryption key that you choose. The plugin package for every service listed in CORSAIR_PLUGINS (e.g. @corsair-dev/slack), plus better-sqlite3, installed where the program can load them. The accounts you connect for each of those services.

Limits

Without better-sqlite3 or one of the listed plugin packages, corsair-mcp exits at start-up. The README's own form, `npx @corsair-dev/mcp`, installs neither, so the snippet installs them globally beside it. The only store the program supports is SQLite. If you reuse a database file made by an older schema, the program refuses it and it must be deleted or migrated. Its makers say run_script is not a sandbox. CORSAIR_READONLY blocks Corsair's write and destructive endpoints only, not other side effects of a script. The program starts no web route. The Hub setup guide sends OAuth callbacks to an /api/corsair route in your app, so connecting accounts may need that app set up separately.

Who it suits

Good for developers already using Corsair, or ready to set up a Hub project, who want one MCP entry to reach many SaaS APIs with the same three-step pattern. It also fits teams building agents with Mastra, LangChain, Vercel AI or the Claude and OpenAI SDKs, since the same package carries adapters for those. It is a poor fit if you want to install one server for one service and sign in from the client, because here you manage plugin packages, a local database and Hub keys. It also does not suit anyone who will not let the model run JavaScript in the server's process. For one service, a dedicated server for that service needs less setup.

Tools 3

list_operations: Lists the API, webhook or database operations of the loaded plugins, optionally filtered by plugin and type
get_schema: Returns the parameters and metadata for one operation, given its dot-path
run_script: Runs an async JavaScript snippet with the corsair client in scope and returns its result

Popularity

38 popularity score, on our list (the bar is 36)

★ 16k ↓ 54/wk

GitHub stars, whole repository	15,690	13.9 points
Stars in 30 days	+2,270	10 points
npm downloads, last week	54	13.9 points

It lives in the folder packages/mcp of corsairdev/corsair, which holds more than this server. Its stars are the whole repository's, so in the score they never count for more than its own downloads.

Measured 2026-11-07. How the score works.

Where it is published

Code	corsairdev/corsair/packages/mcp ★ 16k, the whole repository
npm	@corsair-dev/mcp 0.1.28, 2026-09-10

What it can reach

Runs	On your machine
Reaches	Your account at a service, The internet, Your code, A database
Changes things	Yes: it can write, send, create or delete
Sign-in	An API key or token
Licence	Apache-2.0 (npm)
Last code change	2026-09-10

The server runs on your machine and reaches the third-party services of the plugins you load, using accounts connected through Corsair Hub. It signs in to Hub with a project API key and signing secret. The tokens for the connected accounts are stored encrypted in a local SQLite file (./corsair.db by default) under your key-encryption key. Hub holds only the OAuth client id and secret. run_script runs JavaScript written by the model inside the server's Node process through new Function, and its makers say this is not a sandbox. Scripts can call any write or delete endpoint a plugin offers. CORSAIR_READONLY=true blocks Corsair's write and destructive endpoints, but not other side effects of the script.

Over time

GitHub stars, whole repository 16k +2.3k (+17 %)

16k13k

7 Oct 20267 Nov 2026

npm downloads a week 54 −892 (−94 %)

1.1k17

16 Mar 20267 Nov 2026

Before the site measured it, read from npm's daily download counts.

Popularity score 38 −28 (−43 %)

6627

7 Oct 20267 Nov 2026

What is rising across the directory

Sources

Page checked 2026-10-14.

Badge for your README

Shows this server's rank in its category, and stars for a server that runs on your machine. It updates every hour.

MarkdownREADME.md

[![Corsair on EveryMCPServer](https://everymcpserver.com/badge/corsair.svg)](https://everymcpserver.com/servers/corsair)

Connect your client

Add in one click

Or add it by command or config

Settings 7

What it does

What it needs

Limits

Who it suits

Tools 3

Similar servers

OpenConnector

Pipedream MCP

Agent Harness Kit

mcptoon

AgentRQ

COTAL actions (cotal.ai)