Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@coinbase/cdp-langchain
Advanced tools
CDP integration with Langchain to enable agentic workflows using the core primitives defined in cdp-agentkit-core
. This toolkit contains tools that enable an LLM agent to interact with the Coinbase Developer Platform. The toolkit provides a wrapper around the CDP SDK, allowing agents to perform onchain operations like transfers, trades, and smart contract interactions.
npm install @coinbase/cdp-langchain
Set the following environment variables:
export CDP_API_KEY_NAME=<your-api-key-name>
export CDP_API_KEY_PRIVATE_KEY=<your-private-key>
export OPENAI_API_KEY=<your-openai-api-key>
export NETWORK_ID=base-sepolia # Optional: Defaults to base-sepolia
import { CdpToolkit } from "@coinbase/cdp-langchain";
import { CdpAgentkit } from "@coinbase/cdp-agentkit-core";
// Initialize CDP AgentKit
const agentkit = await CdpAgentkit.configureWithWallet();
// Create toolkit
const toolkit = new CdpToolkit(agentkit);
// Get available tools
const tools = toolkit.getTools();
The toolkit provides the following tools:
import { ChatOpenAI } from "@langchain/openai";
import { HumanMessage } from "@langchain/core/messages";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
// Initialize LLM
const model = new ChatOpenAI({
model: "gpt-4o-mini",
});
// Create agent executor
const agent = createReactAgent({
llm: model,
tools,
});
// Example usage
const result = await agent.invoke({
messages: [new HumanMessage("Send 0.005 ETH to john2879.base.eth")],
});
console.log(result.messages[result.messages.length - 1].content);
The toolkit maintains an MPC wallet that persists between sessions:
// Export wallet data
const walletData = await agentkit.exportWallet();
// Import wallet data
const importedAgentkit = await CdpAgentkit.configureWithWallet({ cdpWalletData: walletData });
The toolkit supports multiple networks.
The following operations support gasless transactions on Base Mainnet:
Check out examples/
for inspiration and help getting started:
See CONTRIBUTING.md for detailed setup instructions and contribution guidelines.
The CDP AgentKit team takes security seriously. See SECURITY.md for more information.
Apache-2.0
FAQs
Langchain Toolkit extension of CDP Agentkit
The npm package @coinbase/cdp-langchain receives a total of 54 weekly downloads. As such, @coinbase/cdp-langchain popularity was classified as not popular.
We found that @coinbase/cdp-langchain demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.