
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@clervo/mcp
Advanced tools
Clervo Connect MCP profiles with one local wallet, live served products, bounded x402, reconciliation, usage, and diagnostics.
@clervo/mcpStdio MCP server for Clervo Connect. A clean one-command install uses the public production origin and the same local wallet, limits, receipts and unresolved operation state as every other Connect surface:
{
"mcpServers": {
"clervo": { "command": "npx", "args": ["-y", "@clervo/mcp"] }
}
}
Claude Code:
claude mcp add clervo -s user -- npx -y @clervo/mcp
The default origin is https://api.clervo.dev. Set CLERVO_BASE_URL only for
another HTTPS deployment or loopback development.
Use --profile research|ai|prediction|crypto|sandbox|full to load only the
schemas relevant to an agent. Profiles are checked against the live registry on
every execution. RPC is not exposed while runtime truth reports it unavailable.
Alongside useful Search and AI tools, clervo_execute safely exposes operations
served in the selected profile. connect_status, spend_limits, local_usage,
reconcile, and doctor expose shared local state without wallet secrets.
Automatic payment is off by default. --auto-pay is an explicit local opt-in;
even then, every quote is bounded by the Router's per-operation and daily
ceilings before signing. Unknown settlement blocks MCP and every other Connect
surface. Reconciliation and same-key replay carry no fresh payment
authorization, and the server never blindly retries.
The package writes MCP protocol messages to stdout and operational failures to stderr only. This client code is MIT licensed; use of the hosted Clervo service remains subject to its service terms.
FAQs
Clervo Connect MCP profiles with one local wallet, live served products, bounded x402, reconciliation, usage, and diagnostics.
The npm package @clervo/mcp receives a total of 51 weekly downloads. As such, @clervo/mcp popularity was classified as not popular.
We found that @clervo/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.