Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
UI feedback for AI-assisted building. Click elements, rate them, agents triage via MCP.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
SPIKES_TOKEN, SPIKES_API_URLValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"spikes": {
"command": "npx",
"args": [
"-y",
"spikes-mcp"
],
"env": {
"SPIKES_TOKEN": "your-value",
"SPIKES_API_URL": "your-value"
}
}
}
}Run this in your terminal
claude mcp add spikes --env SPIKES_TOKEN=your-value --env SPIKES_API_URL=your-value -- npx -y spikes-mcpFill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"spikes": {
"command": "npx",
"args": [
"-y",
"spikes-mcp"
],
"env": {
"SPIKES_TOKEN": "your-value",
"SPIKES_API_URL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"spikes": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"spikes-mcp"
],
"env": {
"SPIKES_TOKEN": "your-value",
"SPIKES_API_URL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
SPIKES_API_URL envThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Runs on your computer; the tool list appears in your AI app after you install it.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The registry name was verified with the GitHub account bierlingm, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
This one runs on your computer; there is no internet endpoint
Runs on your computer and uses local settings instead
Runs on your computer; we can only read tool lists from internet endpoints
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: SPIKES_TOKEN
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
The GitHub repo last changed –, and the latest version (0.4.1) reached the registry 6 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
In the same category: Spec Driven Development, Remote Desktop Commander, Zendesk
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Zendesk MCP Pack — tickets, users, organizations via OAuth.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
The feedback loop for AI-assisted building
AI can build a prototype in an hour.
Turning feedback into action is still the slow part.
Quick Start · CLI Reference · Widget Docs · Hosted Dashboard · Self-Hosting
Spikes is a feedback tool for AI-assisted development. It lets reviewers leave targeted feedback directly on web pages — no screenshots, no "that button over there", no lost context.
Click any element. Rate it. Comment. Spikes captures the exact CSS selector, bounding box, and page context. Your AI agent gets structured JSON it can act on immediately.
No accounts required. No build step. Works on `file://`, localhost, anywhere.
curl -fsSL https://spikes.sh/install.sh | sh
spikes init # Defaults to hosted spikes.sh
spikes init creates .spikes/config.toml with a [remote] section pointing at https://spikes.sh by default. Pass --self-host (or answer s at the prompt) to skip the hosted defaults.
spikes inject ./mockups/ # Injects widget script tag (uses configured endpoint)
spikes serve # http://localhost:3847
spikes list # See all feedback
spikes list --json # Feed to your agent spikes list --rating no # Find problems spikes hotspots # Elements with most feedback spikes resolve # Mark items done
| Command | Description |
|---|---|
spikes init | Create .spikes/ directory with config (hosted by default; --self-host to opt out) |
spikes list | List feedback (--json, --page, --reviewer, --rating, --unresolved) |
spikes show | Show single spike details |
spikes export | Export to JSON/CSV/JSONL/Cursor/Claude context |
spikes hotspots | Elements with most feedback |
spikes reviewers | List all reviewers |
spikes inject | Add/remove widget from HTML files (--endpoint overrides the configured endpoint) |
spikes serve | Local dev server (--port, --marked, --cors-allow-origin) |
spikes mcp serve | Start MCP server for AI agent integration |
spikes pull/push/sync | Sync with remote endpoint |
spikes share | Upload to spikes.sh for instant sharing |
spikes login/logout/whoami | Authentication management |
spikes upgrade/billing | Pro tier subscription via Stripe |
spikes deploy cloudflare | Scaffold self-hosted Worker + D1 |
All commands support --json for scripting. See full CLI reference.
Viewing spikes for a hosted project:
The hosted dashboard at [https://spikes.sh/dashboard](https://spikes.sh/dashboard) lists every project you own and lets you drill into individual spikes (filter by page, rating, resolved, toggle resolved inline). Sign in directly in your browser: click Sign in, open the verification page, and confirm via the magic link sent to your email — no CLI required.
You can also hit the JSON API directly with your bearer token ($SPIKES_TOKEN from spikes login):
# GET /me/projects
curl -H "Authorization: Bearer $SPIKES_TOKEN" \ https://spikes.sh/me/projects
curl -H "Authorization: Bearer $SPIKES_TOKEN" \ "https://spikes.sh/me/projects/my-project/spikes?page=1&per_page=50"
resolved flag on one spikecurl -X PATCH -H "Authorization: Bearer $SPIKES_TOKEN" \ -H "Content-Type: application/json" \ -d '{"resolved": true}' \ https://spikes.sh/me/projects/my-project/spikes/
curl -X POST -H "Authorization: Bearer $SPIKES_TOKEN" \ -H "Content-Type: application/json" \ -d '{"key": "my-project", "allowed_origins": ["https://example.com"]}' \ https://spikes.sh/projects
curl -H "Authorization: Bearer $SPIKES_TOKEN" https://spikes.sh/me/projects
All /me/* endpoints are user-scoped: you only ever see projects and spikes you own. Cross-tenant requests return 404 PROJECT_NOT_FOUND (enumeration-proof).
Security note: API keys (
sk_spikes_*) and the adminSPIKES_TOKENare not accepted on/me/*endpoints orPOST /projects— those require a user bearer token fromspikes login. ThePOST /spikescollect endpoint enforces a per-project origin allowlist and per-project rate limits; rejected widget requests surface as a small red#spikes-error-dotindicator on the widget button (404 / 403 / 429).
Spikes speaks agent natively. Your AI coding assistant can read, write, and manage feedback without ever leaving its workflow.
npx spikes-mcp # Zero-install MCP server — just works
spikes mcp serve starts a Model Context Protocol server that exposes 16 tools:
| Tool | Purpose |
|---|---|
get_spikes | List feedback with filters (page, rating, unresolved, url_prefix, since) |
get_element_feedback | Get feedback for a specific CSS selector |
get_hotspots | Find elements with the most feedback |
submit_spike | Create feedback programmatically |
resolve_spike | Mark feedback as addressed |
delete_spike | Remove a spike |
create_share | Upload files, get a shareable URL |
list_shares | See your active shares |
get_usage | Check usage stats, limits, and spend |
reply_to_spike | Answer a reviewer on the page, optionally with a status and version (hosted) |
set_spike_status | Mark a spike open, addressed, or won't do (hosted) |
list_versions / add_version | Declare review versions and see counts per version (hosted) |
list_questions / ask_question / get_question_answers | Ask reviewers questions and read answers (hosted) |
Supports stdio and HTTP transports, local and remote data modes:
spikes mcp serve # stdio, local JSONL
spikes mcp serve --remote # stdio, hosted API spikes mcp serve --transport http --port 3848 # HTTP for sandboxed agents
Agents get their own identity. No email, no magic link, no human step:
spikes auth create-key --name "my-agent" # → sk_spikes_...
spikes auth list-keys # See all keys spikes auth revoke-key # Revoke
Keys support read/write/full scopes and optional budget caps.
Consumption-based pricing for agent-scale usage. Pay per spike, not per seat:
spikes usage # See current spend and limits
Budget enforcement returns 429 BUDGET_EXCEEDED when caps are hit — agents can check before they burn.
Export structured markdown optimized for agent consumption:
spikes export --format cursor-context > cursor-feedback.md
spikes export --format claude-context > claude-feedback.md
spikes mcp install — Generates config for Claude Desktop / CursorFull details: llms.txt · agents.md
Gate CI on feedback quality. The spikes-action fails builds when unresolved negative feedback exceeds your threshold.
name: CI
on: [push, pull_request]
jobs: feedback-gate: runs-on: ubuntu-latest steps:
See action/README.md for full documentation.
Simple setup — just add your project key and you're ready to collect feedback:
<script src="https://spikes.sh/spikes.js" data-project="my-app"></script>
When you set data-project, feedback syncs automatically to https://spikes.sh/spikes. No need to configure an endpoint unless you're self-hosting.
Full configuration — all available attributes:
<script src="https://spikes.sh/spikes.js"
data-project="my-app" data-position="bottom-right" data-color="#e74c3c" data-theme="dark" data-reviewer="Pat" data-collect-email="true" data-admin="true">
Self-hosting — point to your own backend:
<script src="/spikes.js"
data-project="my-app" data-endpoint="https://my-worker.workers.dev/spikes">
| Attribute | Description | Default |
|---|---|---|
data-project | Group feedback by project key | location.hostname |
data-position | Button corner: bottom-right, bottom-left, top-right, top-left | bottom-right |
data-color | Accent color (any CSS color) | #e74c3c |
data-theme | Modal theme: dark or light | dark |
data-reviewer | Pre-set reviewer name | (prompts user) |
data-endpoint | Backend URL for multi-reviewer sync. Optional — defaults to https://spikes.sh/spikes when data-project is set. | https://spikes.sh/spikes (with data-project), /spikes (local dev) |
data-collect-email | Show email field in prompt | false |
data-admin | Enable review mode features | false |
data-offset-x/y | Button offset from edge | — |
See Widget Attributes Reference for complete documentation.
Spikes has three components that work together or standalone:
┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ CLI │────▶│ Widget │◄────│ Worker │ │ (Rust) │ │ (Vanilla │ │ (Cloudflare │ │ │ │ JS) │ │ + D1) │ └─────────────┘ └─────────────┘ └─────────────┘ │ │ │ spikes.sh (hosted) │ └────────────────────────────────────────────┘
CLI — Rust binary for local development, spike management, and deployment. Stores spikes in ~/.local/share/spikes/.
Widget — 14KB gzipped vanilla JS. Captures element selectors, bounding boxes, ratings, and comments. Works offline via localStorage.
Worker — Optional Cloudflare Worker + D1 backend for multi-reviewer sync, sharing, and hosted deployments. Lives in spikes-hosted/.
cd cli
cargo build --release cargo test # 160+ tests cargo run -- --help
cd widget
CI suite that catches the silent-data-loss bug class (e.g., widget loaded on a non-allowe
Only the beginning is shown; read the rest in the repo