TL;DR: The MCP that gives your AI persistent project memory now has persistent memory of its own. v5.3.0 ships Upstash Redis analytics, new listings on Smithery and Glama, and three security fixes.

Nelly Never Forgets

🐘 Nelly is the FAF mascot for persistence — the idea that your AI should never need re-explaining what your project is. claude-faf-mcp is the tool that makes that real inside Claude Desktop.

In v5.3.0, Nelly gets a memory of her own. Upstash Redis now tracks all-time ecosystem analytics — how the MCP is being used across the community. Not user data. Ecosystem health. The kind of signal that tells us where to focus next.

New Discovery Points

The MCP is now listed in two more places:

🔨

Smithery

One of the fastest-growing MCP marketplaces. Browse, preview, and install MCPs directly from smithery.ai.

Glama.ai

Auto-indexed from GitHub with ecosystem cross-linking — related FAF servers appear alongside claude-faf-mcp for easier discovery.

Combined with the Official MCP Registry, MCP.so, PulseMCP, and awesome-mcp-servers — that's six discovery points for one install command.

Security Hardened

Three CVEs resolved in this release:

  • path-to-regexp — ReDoS vulnerability patched
  • yaml — parse vulnerability resolved
  • flatted — prototype pollution (GHSA-rf6f-7fwh-wjgh) fixed

For a tool that lives permanently in your Claude Desktop config, active maintenance matters. These were caught by automated weekly audit — no user action required.

Install or Update

npm install -g claude-faf-mcp@latest

Or add to your Claude Desktop config:

npx claude-faf-mcp

The Numbers

  • v5.3.0 — Released April 10, 2026
  • 391/391 — Tests passing (12 suites, 2,346 executions per push)
  • 33 tools — Project DNA, scoring, sync, tri-sync (Pro)
  • 52,000+ — FAF ecosystem downloads across all packages
  • IANA registeredapplication/vnd.faf+yaml