
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@creditsync-pro/mcp
Advanced tools
MCP server for connecting Claude Desktop to your CreditSync account. Requires a CreditSync Pro subscription.
Landing page: https://www.creditsync.pro/for-developers — tool breakdown and integration overview.
claude_desktop_config.json):{
"mcpServers": {
"creditsync": {
"command": "npx",
"args": ["@creditsync-pro/mcp"],
"env": {
"CREDITSYNC_API_KEY": "cs_your_key_here"
}
}
}
}
| Tool | Description |
|---|---|
list_benefits | List card-linked benefits (statement credits, free nights, companion certs, lounge passes). Filter by card_id, status, expiring_within_days. For standalone items, use list_rewards |
get_benefit | Get detailed info for a specific benefit with all periods |
mark_benefit_used | Mark a benefit as used (default), partial, or unused |
get_dashboard | Dashboard metrics: expiring, captured, available, ROI |
list_cards | List all cards with issuer, issuing_bank, fees, renewal months, last 4 digits, benefit counts |
get_card | Get a single card's full picture: benefits, ROI, renewal, value at risk |
get_action_items | Prioritized action items: 6 types (benefit_expiring, at_risk_this_period, unused_prior_period, fee_renewal, negative_roi, welcome_offer_at_risk). action_types filter accepts both category names (expiring, renewal_approaching) and response-type names (benefit_expiring, at_risk_this_period, fee_renewal) — the latter for precise filtering. Includes historical_rate, historical_rate_n, historical_rate_confidence fields on dollar-denominated benefits |
get_calendar_events | Structured calendar events for benefit deadlines, fee renewals, welcome offers, loyalty program point expirations, and rewards/certificates expirations. welcome_offer_deadline events carry origin + source_event_id fields so agents can filter retention-origin bonuses separately from signup SUBs |
search_catalog | Search card catalog by issuer, name, or combined (e.g., "Amex Platinum") |
bulk_import_cards | Import multiple cards in one call with fuzzy matching, metadata, and welcome offers. Use dry_run to preview. Reduces onboarding from 40+ calls to 1-3 |
create_card | Add a single card to portfolio by name (fuzzy) or exact template ID. Supports full metadata on creation (last_four, open date, business flag, 5/24, notes) — no follow-up update_card call needed |
archive_card | Deactivate a card (soft delete, preserves history) |
list_programs | List loyalty programs with balances, CPP valuations, staleness. Filter by has_balance, type, owner |
update_balance | Set or adjust a loyalty program balance (absolute or delta) |
get_transfer_partners | Get transfer partners for a currency with ratios. Accepts source or program param |
get_earn_rates | Earning rates for a card: bonus categories, multipliers, caps |
get_best_card | Wallet optimizer: best card for a spend category ranked by value |
update_card | Update card metadata: notes, open date, product change, 5/24 status |
log_retention_offer | Log retention offer interactions for strategy history. Structured fields: outcome (accepted/declined/countered/escalated/no_offer), offer_type, offer_value_dollars/offer_points+offer_currency. When spend_requirement + spend_deadline are passed on an accepted offer, server auto-creates a paired WelcomeOffer for calendar reminders. Validates points_bonus requires currency + points; statement_credit requires dollars. Returns event_id |
update_retention_offer | Patch a logged retention offer in place (fix typos, add missing currency, change outcome). Preserves event_id and date; re-runs validation on merged state; records audit breadcrumb. Prefer over delete+relog |
delete_retention_offer | Delete a retention offer entry by event_id (for correcting mistakes). Prefer update_retention_offer for corrections |
create_welcome_offer | Record a welcome offer with bonus, spend requirement, and deadline |
update_welcome_offer | Update spend progress or status on a welcome offer |
list_welcome_offers | List welcome offers with spend progress and deadline urgency |
create_benefit | Add a new benefit to a card with auto-generated periods. Returns 409 on duplicates; force: true to bypass. dry_run: true validates without persisting |
update_benefit | Update benefit details (name, amount, category, status) |
get_524_status | Compute Chase 5/24 eligibility from card metadata + external cards |
archive_benefit | Archive a benefit (soft delete, preserves history) |
add_external_card | Add a non-catalog card for 5/24 tracking |
remove_external_card | Remove an external card from 5/24 tracking |
list_rewards | List standalone rewards NOT tied to a card (gift cards, vouchers, airline credits). Separate from card-linked list_benefits |
add_reward | Track a standalone reward (not from a card). No card numbers or PINs — existence only |
update_reward | Update reward details or mark as used |
remove_reward | Delete a reward permanently |
Ask Claude:
CreditSync MCP provides the data. You decide what to do with it.
The API is read/write, so your AI assistant can both query your benefit data and act on it. This makes it a building block for workflows that go far beyond simple lookups:
The MCP server runs locally on your machine. Any tool your AI has access to (HTTP APIs, local scripts, messaging platforms) can be combined with CreditSync data to create custom workflows.
FAQs
CreditSync MCP server for Claude Desktop
The npm package @creditsync-pro/mcp receives a total of 85 weekly downloads. As such, @creditsync-pro/mcp popularity was classified as not popular.
We found that @creditsync-pro/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.