
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@clervo/router
Advanced tools
Free-first Clervo CLI for x402 payments, receipts, replay, and local spend controls on Base.
Buy verified machine work from the command line. One install, one command, a real result before you create a wallet or spend anything.
npx @clervo/router search "World Wide Web"
That returns real search results. No signup, no API key, no wallet, no funding. It is the same live endpoint paid calls use, on the free path.
Most agent-payment tools ask you to create a wallet and fund it before you learn whether the thing works. This one is deliberately the other way round: the first useful outcome happens first, and you only create a wallet when you have already decided the paid product is worth it.
search a real result, free, nothing installed but this package
catalog what the live system actually sells right now
quote the exact price of a call, without paying it
wallet create the dedicated payment wallet, once you want a paid product
run pay for one call and get the receipted result
replay fetch a settled result again, without paying twice
doctor check the whole machine end to end
npm install -g @clervo/router # then: clervo search "..."
npx @clervo/router search "..." # or run it without installing
Node 20 or newer.
clervo search "World Wide Web"
clervo catalog
clervo quote search.web "World Wide Web"
catalog and quote read the deployed system, not a list baked into this
package. If a product is not being served right now, it is not offered, and the
price shown for a fixed-price product is the price the server quotes.
clervo wallet create
This creates a wallet used only for Clervo payments and prints its recovery
phrase once. Write it down before continuing — it is the only way to recover the
wallet, and clervo wallet backup will show it again only after you confirm.
The wallet is stored at ~/.clervo/wallet.json, readable only by you, and:
wallet create never overwrites an existing wallet, funded or not.wallet restore refuses outright if the wallet being replaced holds a balance.Fund it with USDC on Base mainnet. Nothing else arrives:
clervo wallet address
clervo wallet balance
You do not need ETH. A Clervo payment is a signed USDC authorization that the facilitator submits, so no gas is paid from your wallet.
Then buy one call:
clervo run search.web "World Wide Web"
You see the quoted price and confirm before anything is signed. What comes back is the result plus a receipt.
Every paid call carries an idempotency key. Running the same key with the same request again returns the stored result and does not authorize a second payment:
clervo run search.web "..." --key my-key-0001
clervo replay my-key-0001
clervo receipt my-key-0001
clervo history
replay sends no payment authorization at all, so it cannot charge you even if
the local record is wrong.
If a call fails after the payment was sent, whether it settled is genuinely unknown. The router records that, refuses to spend again, and tells you to reconcile:
clervo reconcile
Reconciliation asks the server what it knows, using a replay that carries no payment authorization. Until it resolves, no new paid call is allowed. This is deliberate: spending again on top of an unknown settlement is how a double charge becomes invisible.
Limits are enforced on your machine, against the quote, before anything is signed. The server enforces its own ceiling, but that one is the seller's.
clervo limits
clervo limits set --per-operation 0.05 --daily 1.00
Defaults are 0.02 USDC per operation and 0.10 USDC per day.
clervo doctor
Reports the runtime, directory permissions, the API origin, whether the live catalog is reachable, the wallet and its permissions and balance, the spend limits, and whether anything is unreconciled. It never repairs anything on its own — a tool that silently fixes a wallet is a tool that can silently replace one.
| Variable | Meaning |
|---|---|
CLERVO_HOME | Where the wallet, limits, receipts, and operation records live. Default ~/.clervo. Must be an absolute path. |
CLERVO_API_ORIGIN | The API to talk to. Default https://api.clervo.dev. HTTPS, or loopback for local development. |
CLERVO_BASE_RPC_URL | The Base RPC used to read balances. Default https://mainnet.base.org. |
Add --json to any command for machine-readable output.
This is the command-line path only. The MCP server, the language SDKs, and the OpenAI-compatible surface are separate work and are not in this package.
~/.clervo/wallet.json at mode 0600,
and is printed only by wallet create and by wallet backup after you
confirm. It is never logged, never included in diagnostics, and never sent
anywhere.CLERVO_HOME.The distributed @clervo/router client package is MIT licensed. Use of
Clervo's hosted services remains subject to the applicable service terms.
FAQs
Clervo Connect core and free-first CLI with one local wallet, x402 safety, usage, reconciliation, and OpenAI compatibility.
The npm package @clervo/router receives a total of 23 weekly downloads. As such, @clervo/router popularity was classified as not popular.
We found that @clervo/router demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.