
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Universal AI API Orchestrator — 819 tools, 48 services, portable AI Brain bundles + machine-bound vault encryption + Application Engine. The most comprehensive MCP server available. Free and open source from 0nORK.
The most comprehensive MCP server available.
Connect any AI to any API. Natural language. Zero configuration. $0.01/run.
4 patents filed. LinkedIn certifications. Daily patent monitoring via 0nDefender.
Website · Quick Start · All 55 Services · MCP Config · Certifications · Community
One server, every API. Stripe, Slack, GitHub, CRM, Shopify, OpenAI, Anthropic, Google, Microsoft, and 46 more services -- all through a single MCP server. No juggling 20 different integrations.
Talk, don't code. Say "Invoice john@acme.com for $500 and notify #sales on Slack" and it happens. 0nMCP resolves services, maps parameters, handles auth, and executes -- in under 2 seconds.
Production-grade security. Patent-pending 0nVault containers with AES-256-GCM encryption, Argon2id key derivation, Ed25519 signatures, multi-party escrow, and a Seal of Truth integrity system. Your credentials never leave your machine.
npm install -g 0nmcp
# Start MCP server (stdio mode for Claude Desktop / Cursor / Windsurf)
0nmcp
# Or start HTTP server
0nmcp serve --port 3000
# Import your API keys
0nmcp engine import
# Verify all connections
0nmcp engine verify
That's it. Your AI can now use 945 tools across 54 services.
| Service | Tools | What You Can Do |
|---|---|---|
| Slack | Messaging | Send messages, manage channels, upload files |
| Discord | Messaging | Servers, channels, messages, webhooks |
| Twilio | SMS/Voice | Send SMS, make calls, manage numbers |
| SendGrid | Transactional email, templates, contacts | |
| Gmail | Read/send email, labels, threads | |
| Messaging | Business messaging via Twilio |
| Service | Tools | What You Can Do |
|---|---|---|
| CRM | 294 tools | Contacts, calendars, pipelines, invoices, payments, social, objects |
| HubSpot | CRM | Contacts, deals, companies, tickets |
| Pipedrive | CRM | Deals, persons, organizations, pipelines |
| Intercom | Support | Conversations, contacts, articles |
| Zendesk | Support | Tickets, users, organizations |
| Service | Tools | What You Can Do |
|---|---|---|
| Stripe | Payments | Charges, subscriptions, invoices, customers |
| Square | POS | Payments, catalog, customers, orders |
| Plaid | Banking | Account linking, transactions, balances |
| QuickBooks | Accounting | Invoices, customers, payments, reports |
| Service | Tools | What You Can Do |
|---|---|---|
| Jira | Issues | Issues, projects, boards, sprints |
| Asana | Tasks | Tasks, projects, workspaces, sections |
| Linear | Issues | Issues, projects, teams, cycles |
| Notion | Workspace | Pages, databases, blocks, users |
| Service | Tools | What You Can Do |
|---|---|---|
| Supabase | Database | Tables, auth, storage, edge functions |
| MongoDB | Database | Collections, documents, aggregation |
| Airtable | Database | Bases, tables, records, views |
| Google Sheets | Spreadsheets | Read/write cells, create sheets |
| Service | Tools | What You Can Do |
|---|---|---|
| OpenAI | AI | Completions, embeddings, images, assistants |
| Anthropic | AI | Messages, completions, streaming |
| Service | Tools | What You Can Do |
|---|---|---|
| GitHub | Code | Repos, issues, PRs, actions, releases |
| Vercel | Hosting | Deployments, domains, env vars |
| Cloudflare | Infrastructure | DNS, workers, pages, zones |
| Service | Tools | What You Can Do |
|---|---|---|
| Mailchimp | Email Marketing | Campaigns, audiences, automations |
| 50 tools | Posts, profiles, org pages, ads, reporting, events, certifications | |
| Social | Posts, stories, insights | |
| TikTok | Social | Videos, analytics |
| Twitter/X | Social | Tweets, timelines, users |
| SmartLead | Outreach | Campaigns, leads, sequences |
| Service | Tools | What You Can Do |
|---|---|---|
| Google Ads | Advertising | Campaigns, ad groups, keywords |
| Facebook Ads | Advertising | Campaigns, ad sets, creatives |
| LinkedIn Ads | Advertising | Campaigns, audiences, conversions |
| TikTok Ads | Advertising | Campaigns, ad groups, creatives |
| Instagram Ads | Advertising | Campaigns, ad sets, creatives |
| Service | Tools | What You Can Do |
|---|---|---|
| Shopify | E-Commerce | Products, orders, customers, inventory |
| GoDaddy | Domains | Domain availability, DNS, registration |
| Service | Tools | What You Can Do |
|---|---|---|
| Google Calendar | Scheduling | Events, calendars, reminders |
| Calendly | Scheduling | Events, invitees, availability |
| Zoom | Video | Meetings, recordings, users |
| Google Drive | Storage | Files, folders, permissions |
| Dropbox | Storage | Files, folders, sharing |
| Service | Tools | What You Can Do |
|---|---|---|
| Outlook | Messages, calendar, contacts | |
| Teams | Collaboration | Messages, channels, meetings |
| OneDrive | Storage | Files, folders, sharing |
| Azure | Cloud | Resources, services, management |
| Service | Tools | What You Can Do |
|---|---|---|
| Zapier | Automation | Triggers, actions, zaps |
| n8n | Automation | Workflows, nodes, executions |
| Pabbly | Automation | Workflows, connections |
| Make | Automation | Scenarios, modules, connections |
| Module | Tools | Description |
|---|---|---|
| Service Catalog | 701 | API tools across 55 services (including LinkedIn 50-tool suite) |
| CRM Module | 245 | Contacts, calendars, pipelines, invoices, payments, social, custom objects |
| 0nVault | 4 | AES-256-GCM machine-bound encryption |
| Vault Containers | 8 | Patent-pending multi-layer encrypted containers (US #63/990,046) |
| Deed Transfer | 6 | Digital business asset packaging and transfer |
| Engine | 29 | Credential import, verification, AI platform config generation |
| App Builder | 5 | Operations, routes, middleware, scheduler |
| Total | 995+ |
{{system.*}} > {{launch.*}} > {{inputs.*}} > {{step.output.*}}Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"0nMCP": {
"command": "npx",
"args": ["-y", "0nmcp"]
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"0nMCP": {
"command": "npx",
"args": ["-y", "0nmcp"]
}
}
}
Add to ~/.windsurf/mcp.json:
{
"mcpServers": {
"0nMCP": {
"command": "npx",
"args": ["-y", "0nmcp"]
}
}
}
claude mcp add 0nMCP -- npx -y 0nmcp
0nmcp # Start MCP server (stdio)
0nmcp serve [--port] [--host] # HTTP server mode
0nmcp run <workflow.0n> # Execute .0n workflow
0nmcp engine import # Import API keys from .env/CSV/JSON
0nmcp engine verify # Test all connections
0nmcp engine platforms # Generate configs for 7 AI platforms
0nmcp vault create # Create encrypted .0nv container
0nmcp vault open <file> # Decrypt container
0nmcp vault inspect <file> # Inspect without decrypting
0nmcp vault verify <file> # Verify Seal of Truth
0nmcp deed create # Package business assets for transfer
0nmcp deed accept <file> # Accept incoming business transfer
index.js MCP server entry (McpServer from @modelcontextprotocol/sdk)
cli.js CLI handler
catalog.js SERVICE_CATALOG: 54 services with endpoints
tools.js Tool registration (catalog + engine + vault)
connections.js ~/.0n/ credential loader
orchestrator.js AI-driven workflow orchestration
workflow.js WorkflowRunner for .0n file execution
server.js Express HTTP server (MCP over HTTP + webhooks)
capability-proxy.js Zero-knowledge credential proxy
ratelimit.js Token bucket per service with backoff
webhooks.js HMAC verification (Stripe, CRM, Slack, GitHub, Twilio, Shopify)
crm/ 294 CRM tools (data-driven tool factory)
vault/ Encrypted vault + containers + deed transfer
engine/ Credential import, AI platform configs, app builder
0nMCP uses the .0n Standard for configuration and workflow files. Install it separately:
npm install -g 0n-spec
Credentials are stored in ~/.0n/connections/ and workflows in ~/.0n/workflows/.
Full LinkedIn API v2 suite with 17 OAuth scopes:
| Category | Endpoints | Capabilities |
|---|---|---|
| Profile | 5 | Basic info, email, connections, verification, photos |
| Social | 10 | Posts CRUD, comments, likes, shares, image/video upload |
| Organization | 10 | Pages, stats, followers, visitors, brand pages |
| Advertising | 15 | Accounts, campaigns, creatives, targeting, lead forms |
| Ad Reporting | 5 | Analytics, conversions, budgets, InMail stats |
| Events | 5 | Create, manage, attendees |
Complete courses and earn LinkedIn-verifiable certifications:
| Certification | Course | Level |
|---|---|---|
| 0nMCP Certified Orchestrator | 0nMCP Mastery | Getting Started |
| CRM Automation Specialist | CRM Automation Blueprint | Intermediate |
| Security Engineer | 0nVault Security | Advanced |
| AI Council Architect | 0nPlex Council | Advanced |
| Enterprise Deployer | Enterprise Deployment | Enterprise |
| Certified Developer | .0n SWITCH Files | Fundamentals |
Add certifications to your LinkedIn profile with one click. Public verification at 0nmcp.com/verify/{certId}.
Always-on competitive intelligence that monitors four threat vectors daily:
Automated daily scans via Claude AI with web search. Dashboard at /admin/patent-intel.
MIT -- free for personal and commercial use.
Built by 0nORK. Stop building workflows. Start describing outcomes.
FAQs
Universal AI API Orchestrator — 819 tools, 48 services, portable AI Brain bundles + machine-bound vault encryption + Application Engine. The most comprehensive MCP server available. Free and open source from 0nORK.
The npm package 0nmcp receives a total of 519 weekly downloads. As such, 0nmcp popularity was classified as not popular.
We found that 0nmcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.