
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@chieflab/mcp-server
Advanced tools
ChiefLab stdio MCP server — after-build GTM for agents. Bridges Cursor / Claude Desktop / Claude Code / Codex / Windsurf / Cline to the hosted ChiefLab MCP so agents can launch products, get users, approval-gate execution, and measure the next move.
Stdio MCP server for ChiefLab. Drop into Cursor / Claude Desktop / Claude Code / Codex / Windsurf / Cline / any stdio MCP host.
Package status: this bridge is packaged in the repo but not published to npm yet. Use the hosted MCP endpoint directly today:
https://api.chieflab.io/api/mcp.
Current status: packaged in repo, not published to npm yet. Do not tell users to
run npx @chieflab/mcp-server until npm view @chieflab/mcp-server resolves.
Use the hosted MCP URL directly today.
After npm publish:
npm install -g @chieflab/mcp-server
Then in your MCP host config:
{
"mcpServers": {
"chieflab": {
"command": "chieflab-mcp",
"env": { "CHIEFLAB_API_KEY": "clp_live_..." }
}
}
}
Restart the host. ChiefLab's launch tool set is now available — the primary after-build tool is chieflab_get_users_after_build and the canonical launch operator is chiefmo_launch_product. Trigger phrases the host's agent should pick up: launch this · get users · find customers · make money from this · market this · announce this · post this.
A thin stdio→HTTPS bridge. Forwards JSON-RPC frames over stdio to the hosted ChiefLab MCP at https://api.chieflab.io/api/mcp. Same JSON-RPC 2.0 / MCP 2024-11-05 contract on both sides.
Why a bridge instead of bundling the full server:
npm update required to pick up new tools.One click, no email: https://chieflab.io/get-key
ChiefLab is the business execution layer for agent-built companies, starting with GTM. ChiefMO plans the launch grounded in repoContext, creates assets or briefs, opens an approval room, returns a paste-ready agentGuide.userMessage, publishes via Zernio after human approval, sends launch email via Resend, reads results 24h later via GA4 + Search Console + Zernio, remembers what worked, and recommends the next iteration. The v1 wedge is launch/distribution; see /trust for the live-vs-mock connector reality.
Before calling ChiefLab, coding agents can gather repo context locally:
curl -fsSL https://chieflab.io/repo-context.mjs | node - --what-changed="what I just shipped"
Pass the printed JSON as repoContext to chieflab_get_users_after_build.
To install persistent repo instructions for agents:
Working installer today:
curl -fsSL https://chieflab.io/install-agent-hook.mjs | node -
Windows PowerShell:
iwr https://chieflab.io/install-agent-hook.mjs -OutFile .chieflab-install-agent-hook.mjs; node .\.chieflab-install-agent-hook.mjs
npm command after publish:
npx @chieflab/cli init
This writes the after-build hook (AGENTS.md, Cursor rule, Claude command, Codex note, MCP config stub) so future "launch this / get users / make money" prompts route to chieflab_get_users_after_build, then resume with chiefmo_continue_launch_loop.
Full docs: https://chieflab.io/for-agents
POST https://api.chieflab.io/api/mcp with Authorization: Bearer clp_live_.... Any HTTP client works.cursor:// deeplink.| Var | Default | What |
|---|---|---|
CHIEFLAB_API_KEY | (required) | Bearer key. clp_live_... or clp_dev_.... |
CHIEFLAB_ENDPOINT | https://api.chieflab.io/api/mcp | Override (staging / self-hosted). |
CHIEFLAB_TIMEOUT_MS | 120000 | Per-request timeout. |
If you want a stdio MCP that runs the full ChiefLab tool set locally (Supabase persistence, connector OAuth, your own Zernio/Resend keys), clone the source repo and run node apps/mcp/src/server.js from there. This npm package is the client-side bridge to the hosted runtime; apps/mcp is the server-side runtime itself.
https://github.com/bdentech/chieflab/tree/main/packages/mcp-server · Apache 2.0
FAQs
ChiefLab stdio MCP server — after-build GTM for agents. Bridges Cursor / Claude Desktop / Claude Code / Codex / Windsurf / Cline to the hosted ChiefLab MCP so agents can launch products, get users, approval-gate execution, and measure the next move.
We found that @chieflab/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.