Lastest Visual Regression Testing - Cloud/Self-hosted version
SaferSkills independently audited Lastest (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Score rose 55 points between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill teaches the agent to drive a Lastest instance — running visual regression tests, inspecting screenshot diffs, and approving or rejecting baselines — through the official @lastest/mcp-server MCP server.
Use this skill when the user:
The agent needs the @lastest/mcp-server MCP server configured in the user's MCP client. If it is not present, guide the user through setup:
One-liner (Claude Code, stdio):
claude mcp add lastest -- npx -y @lastest/mcp-server@latest \
--url <LASTEST_URL> \
--api-key <LASTEST_API_KEY>Claude Desktop / Cursor (stdio):
{
"mcpServers": {
"lastest": {
"command": "npx",
"args": [
"-y",
"@lastest/mcp-server@latest",
"--url",
"https://app.lastest.cloud",
"--api-key",
"YOUR_API_KEY"
]
}
}
}Remote HTTP (no local Node required):
claude mcp add --transport http lastest https://app.lastest.cloud/api/mcp \
--header "Authorization: Bearer YOUR_API_KEY"The API key is created at Settings → Runners & API Access → Create API Key in the Lastest web UI. Tell the user it is shown only once.
Always verify connectivity before mutating state.
lastest_status with action: "health". If it fails, ask the user to verify the URL and API key, then stop.lastest_repo with action: "list". If there are multiple, ask the user which one.lastest_area with action: "list_tests" and skip to step 4.lastest_test with action: "list" (or lastest_area action: "list_tests") and confirm which ones with the user.lastest_run_tests with the repo id and optional testIds. Poll lastest_build (action: "get") until the build finishes, surfacing progress to the user.lastest_build (action: "get") for the finished build. If there are visual diffs, inspect them with lastest_get_diffs (scope: "build", or scope: "single" per diff).lastest_decide_diff. Do not approve/reject without explicit confirmation.lastest_create_test with a URL and prompt. If an existing test is broken, call lastest_heal_test after confirming.lastest_decide_diff with a buildId (approve-all), lastest_test action: "delete", or lastest_decide_diff action: "reject" on a batch without the user explicitly confirming the scope first — these operations are destructive or change shared baselines for the whole team.lastest_status (action: "health") or any tool returns a 401, stop and ask the user to regenerate their API key; do not retry with a different key.Pure CRUD lives on resource tools that take an action (or scope) discriminator; workflow verbs are standalone.
| Purpose | Tool(s) | |||||
|---|---|---|---|---|---|---|
| Status & jobs | lastest_status (health \ | jobs \ | job) | |||
| Repositories | lastest_repo (list \ | get \ | create \ | update \ | get_settings \ | update_settings) |
| Functional areas | lastest_area (list \ | create \ | update \ | delete \ | list_tests) | |
| Tests | lastest_test (list \ | get \ | update \ | delete), lastest_create_test, lastest_heal_test | ||
| Builds & runs | lastest_build (list \ | get \ | review), lastest_run_tests, lastest_validate_diff | |||
| Diffs | lastest_get_diffs (single \ | build), lastest_decide_diff (approve \ | reject) | |||
| Verify phase | lastest_verify (view \ | change_map), lastest_approve_layer | ||||
| Sharing | lastest_publish_share, lastest_share (list \ | revoke) | ||||
| Insights | lastest_insights (coverage \ | qa) | ||||
| Setup & storage | lastest_setup_script (5 actions), lastest_storage_state (list \ | create \ | delete) |
Full docs: Lastest MCP Server wiki.
| Symptom | Guide the user to... |
|---|---|
Failed to connect to Lastest | Verify the URL is reachable and the API key hasn't been revoked. |
Lastest API error 401 | Regenerate the key at Settings → Runners & API Access. |
| No repositories returned | Confirm the key belongs to a team with at least one connected repository. |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.