
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@2sio/mcp
Advanced tools
MCP server for 2s — the (most) everything API. Hundreds of pay-per-call AI-agent data tools (public records, finance, crypto, security, legal, health, geo, EDI), settled in USDC on Base or Solana via x402.
MCP server for 2s.io — the (most) everything API. Gives any MCP-aware AI agent pay-per-call access to hundreds of ground-truth data endpoints.
Model Context Protocol is the standard for AI agents to discover and use tools. This package runs a local MCP server that exposes every 2s.io endpoint as a callable tool. Plug it into Claude Desktop, AgentKit, Cline, Continue, or any other MCP host.
npx @2sio/mcp --signer 0x...
No accounts to create. The server signs for whichever chain you configured a key on — Base USDC (EIP-3009) or Solana SPL-USDC. Settles in ~2 seconds. Prices start at $0.001/call. 2s is an open-ended experiment in maximally-comprehensive agent infrastructure — the toolset grows continually (540+ endpoints across 110+ groups and counting).
Prefer not to run anything? Point any MCP host at the hosted server:
https://2s.io/mcp
Streamable-HTTP transport; set header X-EVM-Private-Key: 0x… (an EVM key funded with USDC on Base) and the server signs + settles x402 per call. Security tradeoff: with the hosted server your private key transits 2s's infrastructure to sign — for keys that never leave your machine, run this package locally (above) or use the @2sio/sdk instead.
Beyond read tools, 2s exposes watchers: the agent arms one and 2s POSTs a signed callback the moment something happens — a wallet moves, a stock crosses a price, a company reports earnings — so the agent never has to poll. Flat $0.05 to arm; signed + retried delivery with a status backstop. Tools: watchers.crypto-address-activity, watchers.stock-price, watchers.earnings (+ watchers.status / watchers.cancel).
A single MCP install gives the agent tools spanning, among others:
See the live catalog for everything currently shipped.
Pass --trial (or set TWOS_TRIAL=1) to make real calls without paying — one free call per endpoint per hour, no key required. Drop the flag and configure a key when you're ready to pay per call.
Add to claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json, Windows: %APPDATA%\Claude\claude_desktop_config.json):
{
"mcpServers": {
"2sio": {
"command": "npx",
"args": ["-y", "@2sio/mcp"],
"env": {
"EVM_PRIVATE_KEY": "0x...your_funded_base_mainnet_key..."
}
}
}
}
Restart Claude Desktop. The agent now has 540+ new tools — patent search, court-case lookup, SEC filings, VIN decode, ICD-10 lookup, sanctions screening, structured webpage extraction, geocoding, weather, distributed locks/queues/schedules, wallet-keyed storage, and much more.
import { createTwoSioMcpServer } from '@2sio/mcp'
import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
const server = createTwoSioMcpServer({
privateKey: process.env.EVM_PRIVATE_KEY as `0x${string}`,
maxPriceUsd: 0.05,
})
await server.connect(new StdioServerTransport())
maxPriceUsd defaults to Infinity) — set --max-price (or the maxPriceUsd option) to opt into a ceiling above which the server refuses to sign.Same set as @2sio/sdk. See https://2s.io/api/directory for the live catalog and https://2s.io/.well-known/x402 for the machine-readable manifest.
@2sio/sdkFAQs
MCP server for 2s.io — 575+ pay-per-call tools for AI agents — ground-truth data, AI gateway, and agent infra (storage, locks, queues, watchers). x402 USDC on Base/Solana, no API keys, upto usage billing, free trials.
The npm package @2sio/mcp receives a total of 544 weekly downloads. As such, @2sio/mcp popularity was classified as not popular.
We found that @2sio/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.