ReactBLOCK
react-mcp integrates with Claude Desktop, enabling the creation and modification of React apps based on user prompts
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://smithery.ai/server/@Streen9/react-mcp)
A powerful server implementation that enables Claude AI to interact with React applications through the Model Context Protocol.
Sample Usage
Overview
React MCP provides a bridge between Claude AI and the React ecosystem, allowing Claude to:
- Create new React applications
- Run React development servers
- Manage files and directories
- Install npm packages
- Execute terminal commands
- Track and manage long-running processes
This server implements the Model Context Protocol, providing Claude with the ability to perform real-world actions in the development environment.
Features
- React Project Management
- Create new React applications with optional templates
- Run development servers
- Manage dependencies
- File Operations
- Read and write files
- Edit React components and configuration
- Process Management
- Start and monitor long-running processes
- Track process output in real-time
- Terminate processes when needed
- Command Execution
- Run arbitrary terminal commands
- Install npm packages
- Execute development tasks
- Comprehensive Logging
- Detailed JSON and text logs
- Process tracking with timestamps
- Execution history
Installation
Installing via Smithery
To install R
5bc4de5e2f16OBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add react-mcp -- npx -y [email protected]
{
"mcpServers": {
"react-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (9)
3 read · 6 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
create-react-app | write | Create a new React application |
edit-file | write | Create or edit a file |
get-process-output | read | Get the output from a running or completed process |
install-package | write | Install a npm package in a project |
list-processes | read | List all running processes |
read-file | read | Read the contents of a file |
run-command | write | Run a terminal command |
run-react-app | write | Run a React application in development mode |
stop-process | write | Stop a running process |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
exec(command, options, (error, stdout, stderr) => {@modelcontextprotocol/sdk, js-yaml, zod
Gates applied: no_behavioural_pass.
5bc4de5e2f16full audit observations/trust-audit/mcp-server/kalivaraprasad-gonapa__react-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 5bc4de5e2f16 | BLOCK | D | 69 | first audit |
Questions
What is the React MCP server?
react-mcp integrates with Claude Desktop, enabling the creation and modification of React apps based on user prompts
What tools does React expose?
9 in total: 3 read-only, 6 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is React safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does React need?
No credential environment variables were found in its source, so it appears to need none.
How does React run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as react-mcp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (5bc4de5e2f16), read on 2026-10-07. The repository is watched and re-audited when it changes.