
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@cross-deck/ai
Advanced tools
Crossdeck AI — the MCP connector that lets Claude, Cursor, and any AI tool query and operate your Crossdeck app. The product is 'Crossdeck understands your app'; MCP is just the transport.
Connect Crossdeck to Claude, Cursor, or any MCP client and ask your app questions in plain English — and get rendered charts and dashboards back, not just numbers. "Why did revenue drop?" "Who did this crash affect — do they pay us?" "Draw user growth over the last 30 days."
Crossdeck joins the layers about your users — identity, revenue, entitlements, errors, analytics, and database read-cost — into one place, by identity. Crossdeck AI gives that source-of-truth a voice. MCP is the transport; the product is Crossdeck understands your app, in whatever AI tool you use.
The point isn't "let AI read my data." It's the crossing: because Crossdeck owns the identity that ties the layers together, one question can span them — who an error hit and how many of them pay you. No single-layer analytics or error tool can answer that.
Directory / remote (recommended): add the Crossdeck connector in your client's connector settings and complete the one-click sign-in — you'll authorize Crossdeck and pick a project. No keys to paste. (OAuth 2.0.)
Local (Claude Desktop / Cursor / Claude Code): install and pass a secret key from your Crossdeck dashboard → API keys:
npm install -g @cross-deck/ai
{
"mcpServers": {
"crossdeck": { "command": "crossdeck-ai", "env": { "CROSSDECK_SECRET_KEY": "cd_sk_live_…" } }
}
}
Use a secret key (cd_sk_), never a publishable (cd_pub_) one — these are server-side reads of private data. CROSSDECK_API_BASE overrides the endpoint (e.g. sandbox).
| Ask | Tool(s) used | Expected outcome |
|---|---|---|
| "What's our MRR and how many paying customers, split by Stripe/Apple/Google?" | get_revenue | Current MRR in dollars, paying-customer count, and the three-rail split. |
| "Draw our user growth over the last 30 days." | draw_user_growth | A rendered line chart of unique visitors + page views over time, with totals. |
"This error a1b2c3 — who did it affect, and do any of them pay us?" | get_error_impact | The issue's type/status/occurrences plus affected users and how many are paying. |
"Show me everything about customer agent_8842." | get_customer → moat dashboard | A rendered cross-match: what they pay × entitlements × read-cost, in one view. |
| "What's driving our database reads — per-user vs overhead?" | get_read_cost | The per-user-vs-overhead split + reads by operation. |
Data tools return clean JSON; the draw_user_growth and open_moat_dashboard tools render interactive charts/dashboards inline (in hosts that support MCP Apps; they fall back to a text summary elsewhere).
| Tool | Title | Answers |
|---|---|---|
get_revenue | Get revenue | MRR / paying count / per-rail / trend |
get_read_cost | Get database read-cost | per-user vs overhead, by operation |
get_error_impact | Get who an error affected | who it hit + how many pay |
get_customer | Get a customer's full picture | revenue × entitlements × read-cost |
get_host_analytics | Get analytics for a host | per-subdomain views + uniques |
get_host_top_pages | Get top pages/referrers for a host | per-host breakdown |
draw_user_growth | Draw user growth over time | rendered chart |
open_moat_dashboard | Open the cross-layer dashboard | rendered cross-match |
Every tool is read-only (readOnlyHint), has a human-readable title, returns scoped/paginated results, and surfaces actionable errors. All reads are point-reads of maintained ledgers — asking questions never runs up your database bill.
Crossdeck AI reads only your own project's aggregate data, scoped by your token. It does not read your conversation history or local files. Full policy: https://cross-deck.com/legal/privacy/.
support@cross-deck.com · docs: https://cross-deck.com/docs/reporting-api/
MIT.
FAQs
Crossdeck AI — the MCP connector that lets Claude, Cursor, and any AI tool query and operate your Crossdeck app. The product is 'Crossdeck understands your app'; MCP is just the transport.
The npm package @cross-deck/ai receives a total of 83 weekly downloads. As such, @cross-deck/ai popularity was classified as not popular.
We found that @cross-deck/ai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.