
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@chaprola/mcp-server
Advanced tools
MCP server for Chaprola — agent-first data platform. Gives AI agents tools for structured data storage, record CRUD, querying, schema inspection, documentation lookup, web search, URL fetching, scheduled jobs, scoped site keys, and execution via plain HTT
MCP server for Chaprola — the agent-first data platform.
Gives AI agents 40 tools for structured data storage, querying, web search, URL fetching, scheduled jobs, and execution through the Model Context Protocol.
claude mcp add chaprola-mcp -e CHAPROLA_USERNAME=yourusername -e CHAPROLA_API_KEY=chp_yourkey -- npx @chaprola/mcp-server
Note: After installing, restart Claude Code to load the MCP server. The server description and tools will then be available to Claude.
Add to claude_desktop_config.json:
{
"mcpServers": {
"chaprola": {
"command": "npx",
"args": ["@chaprola/mcp-server"],
"env": {
"CHAPROLA_USERNAME": "yourusername",
"CHAPROLA_API_KEY": "chp_yourkey"
}
}
}
}
Add to .vscode/mcp.json:
{
"servers": {
"chaprola": {
"command": "npx",
"args": ["@chaprola/mcp-server"],
"env": {
"CHAPROLA_USERNAME": "yourusername",
"CHAPROLA_API_KEY": "chp_yourkey"
}
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"chaprola": {
"command": "npx",
"args": ["@chaprola/mcp-server"],
"env": {
"CHAPROLA_USERNAME": "yourusername",
"CHAPROLA_API_KEY": "chp_yourkey"
}
}
}
}
# Register (returns your API key — save it immediately)
curl -X POST https://api.chaprola.org/register \
-H "Content-Type: application/json" \
-d '{"username": "myname", "passcode": "my-secure-passcode-16chars"}'
Or use the chaprola_register tool after connecting.
| Tool | Description |
|---|---|
chaprola_hello | Health check |
chaprola_register | Create account |
chaprola_login | Login (get new API key) |
chaprola_check_username | Check username availability |
chaprola_delete_account | Delete account + all data |
chaprola_sign_baa | Sign Business Associate Agreement (PHI only) |
chaprola_baa_status | Check BAA status |
chaprola_baa_text | Get BAA text |
chaprola_import | Import JSON to Chaprola format |
chaprola_import_url | Get presigned upload URL |
chaprola_import_process | Process uploaded file |
chaprola_import_download | Import from URL (CSV/Excel/JSON/Parquet) |
chaprola_export | Export to JSON |
chaprola_list | List files |
chaprola_compile | Compile .CS source to .PR bytecode |
chaprola_run | Execute .PR program |
chaprola_run_status | Check async job status |
chaprola_publish | Publish program for public access |
chaprola_unpublish | Remove public access |
chaprola_report | Run published program (no auth) |
chaprola_export_report | Run program and save output |
chaprola_download | Get presigned download URL |
chaprola_query | Filter, aggregate, join data |
chaprola_sort | Sort data file |
chaprola_index | Build index on field |
chaprola_merge | Merge two sorted files |
chaprola_optimize | HULDRA nonlinear optimization |
chaprola_optimize_status | Check optimization status |
chaprola_email_inbox | List emails |
chaprola_email_read | Read email |
chaprola_email_send | Send email |
chaprola_email_delete | Delete email |
chaprola_search | Web search via Brave API |
chaprola_fetch | Fetch URL content as markdown/text/JSON |
chaprola_schedule | Create scheduled recurring job |
chaprola_schedule_list | List scheduled jobs |
chaprola_schedule_delete | Delete scheduled job |
The server exposes reference documentation as MCP resources:
chaprola://cookbook — Language cookbook with complete exampleschaprola://endpoints — All 40 API endpointschaprola://auth — Authentication referencechaprola://gotchas — Common mistakes to avoid| Variable | Required | Description |
|---|---|---|
CHAPROLA_USERNAME | Yes | Your registered username |
CHAPROLA_API_KEY | Yes | Your API key (format: chp_ + 64 hex chars) |
Non-PHI data works without a signed BAA. If handling Protected Health Information (PHI), a human must review and sign the BAA first. The server includes guardrails that warn agents when the BAA is not signed.
FAQs
MCP server for Chaprola — agent-first data platform. Gives AI agents tools for structured data storage, record CRUD, querying, schema inspection, documentation lookup, web search, URL fetching, scheduled jobs, scoped site keys, and execution via plain HTT
We found that @chaprola/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.