
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@clervo/sdk
Advanced tools
@clervo/sdkTyped client for the live Clervo API. It exposes cited Search plus the complete provider-neutral AI catalog and normalized AI execution contract.
import { ClervoClient } from '@clervo/sdk';
const clervo = new ClervoClient(); // https://api.clervo.dev
const catalog = await clervo.models.list();
const free = catalog.data.find((model) =>
model.clervo.publicSellable && model.clervo.billingMode === 'free'
);
if (!free) throw new Error('no free model is currently available');
const result = await clervo.ai.execute({
model: free.id,
input: {
kind: 'chat',
messages: [{ role: 'user', content: 'Reply with the single word ready.' }],
responseFormat: 'text',
stream: false,
},
maximumOutputTokens: 16,
}, { idempotencyKey: 'my-stable-request-0001' });
models.list() returns stable canonical Clervo IDs and explicit alias
contracts, capabilities, health, availability, free/paid state, pricing, and
commerce metadata. ai.execute() accepts the normalized chat, embedding,
image, speech, video, music, and virtual-try-on inputs published by OpenAPI.
Canonical IDs are never silently substituted.
Paid models throw ClervoPaymentRequiredError with the server's exact
PAYMENT-REQUIRED challenge. The SDK never creates a wallet, signs, pays, or
retries a payment automatically. A caller may deliberately pass an approved
paymentSignature or paymentAuthorization; same-key replay returns the same
receipted result without another authorization.
Search remains available through clervo.search.web() and
clervo.search.answer(). Known failures can be reduced to a bounded recovery
action with recoveryActionFor(error). Unknown settlement and payment timeout
states prohibit retry until the original idempotency key is reconciled.
Set baseUrl only for another HTTPS deployment or loopback development. This
client code is MIT licensed; use of the hosted Clervo service remains subject
to its service terms.
FAQs
Clervo Connect TypeScript SDK for live products, one local wallet, bounded x402, replay, reconciliation, and usage.
The npm package @clervo/sdk receives a total of 26 weekly downloads. As such, @clervo/sdk popularity was classified as not popular.
We found that @clervo/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.