Auto Claude Code Research In Sleep
@bitbonsai/mcpvault · by wanshuiyin
ARIS ⚔️ (Auto-Research-In-Sleep) — Lightweight Markdown-only skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation. No framework, no lock-in — works with Claude Code, Codex, OpenClaw, or any LLM agent.
No known CVEs
MIT license
Actively maintained
Last commit 3d ago
Works with most clients
Transport: stdio, sse, http
5 tools · ~699 tok
Grade B · 0.3% of 200K ctx
MCPpedia last refreshed this data
Auto Claude Code Research In Sleep is an MCP server that ARIS ⚔️ (Auto-Research-In-Sleep) — Lightweight Markdown-only skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation. No framework, no lock-in — works with Claude Code, Codex, OpenClaw, or any LLM agent. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 92/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"auto-claude-code-research-in-sleep": {
"args": [
"-y",
"@bitbonsai/mcpvault"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/auto-claude-code-research-in-sleep)
Read me
What Auto Claude Code Research In Sleep does
💡 Use ARIS in Claude Code / Cursor / Trae as a skill-based workflow, or get the full experience with the standalone CLI — enjoy any way you like!
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@bitbonsai/mcpvault' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
92/100across 5 weighted dimensions
0255075100
30
21
16
15
10
−8
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev4 fixed
GHSA-9c83-rr99-vfwjinfo · fixed
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
PathFilter's deny-list glob patterns are anchored, so `.git`, `.obsidian`, and `node_modules` were only blocked at the vault root. Nested copies inside the vault (e.g. `tools/cli/node_modules/...`, `tools/somerepo/.git/config`, a nested `.obsidian/`) were fully traversable via isAllowed/isAllowedForListing. Impact: a nested `.git/config` (remote URLs / embedded tokens) and nested `.obsidian` contents could be read, under the same prompt-injection threat model as GHSA-j99q-93c9-h869 (an attacker
CVE-2026-57442medium · fixed
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
PathFilter's deny-list glob patterns are anchored, so `.git`, `.obsidian`, and `node_modules` were only blocked at the vault root. Nested copies inside the vault (e.g. `tools/cli/node_modules/...`, `tools/somerepo/.git/config`, a nested `.obsidian/`) were fully traversable via isAllowed/isAllowedForListing. Impact: a nested `.git/config` (remote URLs / embedded tokens) and nested `.obsidian` contents could be read, under the same prompt-injection threat model as GHSA-j99q-93c9-h869 (an attacker
GHSA-j99q-93c9-h869info · fixed
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
On case-insensitive filesystems (macOS, Windows), PathFilter compiled its deny-list patterns case-sensitively and matched the path verbatim, so names like `.Git/config`, `.GIT/config`, or `.oBsIdIaN/secrets.md` slipped past the `.git`/`.obsidian`/`node_modules` restriction while the OS opened the real file. On Windows, trailing dots/spaces (`.git./config`, `.git /config`) bypassed it the same way. Affects both `isAllowed` (read/write/move/search) and `isAllowedForListing`. Vault-root `..` contai
CVE-2026-57441medium · fixed
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
On case-insensitive filesystems (macOS, Windows), PathFilter compiled its deny-list patterns case-sensitively and matched the path verbatim, so names like `.Git/config`, `.GIT/config`, or `.oBsIdIaN/secrets.md` slipped past the `.git`/`.obsidian`/`node_modules` restriction while the OS opened the real file. On Windows, trailing dots/spaces (`.git./config`, `.git /config`) bypassed it the same way. Affects both `isAllowed` (read/write/move/search) and `isAllowedForListing`. Vault-root `..` contai
Inventory
Tools (5)
Click any tool to inspect its schema.
~699 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Auto Claude Code Research In Sleep safe to use?
- Auto Claude Code Research In Sleep has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install Auto Claude Code Research In Sleep?
- Auto Claude Code Research In Sleep supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Auto Claude Code Research In Sleep do?
- Auto Claude Code Research In Sleep provides 5 tools: research-pipeline, rebuttal, paper-slides, paper-poster, experiment-bridge. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Auto Claude Code Research In Sleep?
- Auto Claude Code Research In Sleep is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Auto Claude Code Research In Sleep actively maintained?
- Auto Claude Code Research In Sleep is actively maintained — last commit was 3 days ago. It has 15,267 GitHub stars.
Related
Similar servers
Others in ai-ml / education
Dsh MCP Client97MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
196.7k 4
Gpt Researcher97An autonomous agent that conducts deep research on any data using any LLM providers
29.2k 5
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.5k 4
I
io.github.mims-harvard/tooluniverse961000+ scientific tools for AI scientists: life science, reserach, literature, and more.
1.7k 4
MCP Security Weekly
Get CVE alerts and security updates for Auto Claude Code Research In Sleep and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.