
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@codespar/mcp-culqi
Advanced tools
MCP server for Culqi — Peru's default PSP (the Stripe of Peru). Charges, subscriptions, customers, cards, Yape / PagoEfectivo orders.
MCP server for Culqi — Peru's default PSP.
Culqi is the Stripe of Peru: the standard rail for Peruvian D2C brands and SaaS. It ships CulqiOnline (hosted checkout), CulqiLink (payment links), and CulqiFull (subscriptions). Adding Culqi brings Peru into the CodeSpar catalog alongside Mexico, Brazil, Colombia, Argentina, and Chile.
| Tool | Purpose |
|---|---|
create_token | Tokenize a card (POST /tokens) — usually client-side, server-side for testing |
create_charge | Charge a card or token (POST /charges) in PEN or USD |
get_charge | Retrieve a charge by id |
refund_charge | Refund a captured charge (full or partial) |
create_customer | Create a customer record |
create_card | Attach a tokenized card to a customer for reuse |
create_plan | Create a subscription plan |
create_subscription | Subscribe a customer's card to a plan (CulqiFull) |
cancel_subscription | Cancel an active subscription |
list_events | List webhook events with filters (type, date range) |
npm install @codespar/mcp-culqi
CULQI_SECRET_KEY="sk_test_..." # or sk_live_... for production
Culqi has no separate sandbox URL — the key prefix (sk_test_ vs sk_live_) selects the environment.
Bearer token on every request:
Authorization: Bearer <CULQI_SECRET_KEY>
Content-Type: application/json
Base URL: https://api.culqi.com/v2.
# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-culqi
# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-culqi
1000 = S/ 10.00 PEN).PEN, USD.create_token tool is primarily for test scripts — never send real PANs from a backend without PCI scope.tyc: true (terms & conditions acceptance) on creation.MIT
FAQs
MCP server for Culqi — Peru's default PSP (the Stripe of Peru). Charges, subscriptions, customers, cards, Yape / PagoEfectivo orders.
The npm package @codespar/mcp-culqi receives a total of 6 weekly downloads. As such, @codespar/mcp-culqi popularity was classified as not popular.
We found that @codespar/mcp-culqi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.