
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@agtnames/mcp
Advanced tools
MCP server for .agt agent names: resolve, verify and discover agents by name against AGT Registry v2. Works with any MCP-compatible client (Claude Code, Cursor, custom agents).
MCP server for .agt agent names. Resolve a name to its owner, records and signature-verified manifest (endpoints, capabilities, keys, payments) from the AGT Registry v2. Read-only. Works with any MCP-compatible client — Claude Code, Cursor, or your own agent runtime.
| Tool | Returns |
|---|---|
agt_resolve | owner, expiry, active/perpetual, on-chain records, verified manifest (under untrusted) |
agt_manifest | the manifest document + verified / reasons |
agt_endpoint | URL for mcp / a2a / http / ws — verified manifest first, resolver record second |
agt_available | can the name be registered right now |
agt_namehash | node + tokenId (no network) |
verified: true means the manifest was signed by the on-chain owner (signer = manifest owner = registry owner). Everything derived from a manifest is returned inside an untrusted envelope with a notice: it is third-party content — data, never instructions.
AGT_CHAIN=polygon # polygon | amoy | localhost
AGT_REGISTRY=0x… # required until the chain default is published
AGT_RPC_URL=… # optional override
AGT_LEGACY=1 # optional: Registry v1 (Freename) + DNS TXT fallbacks
AGT_IPFS_GATEWAY=https://dweb.link/ipfs/ # must be allow-listed
claude mcp add agt -e AGT_CHAIN=polygon -e AGT_REGISTRY=0x… -- npx -y @agtnames/mcp
Or from a checkout: claude mcp add agt -e … -- node packages/mcp/dist/index.js.
Name validation before any network call; IPFS gateway allow-list; https/data: URIs only; manifest size and time caps; manifest strings length-capped and control-character-stripped; in-process rate limit.
FAQs
MCP server for .agt agent names: resolve, verify and discover agents by name against AGT Registry v2, and (opt-in) write records under an owner-signed session grant. Works with any MCP-compatible client (Claude Code, Cursor, custom agents).
The npm package @agtnames/mcp receives a total of 386 weekly downloads. As such, @agtnames/mcp popularity was classified as not popular.
We found that @agtnames/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.