
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@bridgenode/mcp
Advanced tools
BridgeNode MCP wrapper — stdio MCP server proxying to remote streamable-HTTP /mcp with automatic x402 payments (Solana USDC). No API keys.
Built for AI agents — no API keys, no registration, pay-as-you-go with Solana USDC via x402.
BridgeNode MCP wrapper — stdio MCP server that proxies requests to the remote
https://bridgenode.cc/mcp (streamable-HTTP) with automatic x402 payment
(Solana USDC). No API keys, no registration.
claude mcp add bridgenode -s user -- npx -y @bridgenode/mcp@latest
Or manually (Claude Code, Cursor, other MCP clients):
{
"mcpServers": {
"bridgenode": {
"command": "npx",
"args": ["-y", "@bridgenode/mcp@latest"]
}
}
}
# Solana wallet private key (base58) — agent's payment wallet
BRIDGENODE_WALLET_KEY=
# Spending policy (fail-closed)
BRIDGENODE_MAX_PER_CALL=0.05
BRIDGENODE_DAILY_CAP=1.0
chat_completions — AI inference (paid; x402 payment automatic)list_models — model list (free)get_price_estimate — estimate cost of a chat request (free)https://bridgenode.cc/mcp (streamable HTTP)tools/call receiving 402 (payment required) — the wrapper automatically
signs the payment with BRIDGENODE_WALLET_KEY and retries the requestPrefer Python? The same BridgeNode toolkit is on PyPI:
pip install bridgenode-llm → https://pypi.org/project/bridgenode-llmpip install bridgenode-cli → https://pypi.org/project/bridgenode-clipip install bridgenode → https://pypi.org/project/bridgenode⭐ Star this repo — it helps AI agents discover BridgeNode.
FAQs
BridgeNode MCP wrapper — stdio MCP server proxying to remote streamable-HTTP /mcp with automatic x402 payments (Solana USDC). No API keys.
The npm package @bridgenode/mcp receives a total of 267 weekly downloads. As such, @bridgenode/mcp popularity was classified as not popular.
We found that @bridgenode/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.