
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@dcprotocol/mcp
Advanced tools
MCP Server for DCP Vault - Agent interface for secure wallet signing and data access
MCP server for DCP Vault. Use this to connect AI agents (Claude, Cursor, OpenClaw, etc.) to a local DCP vault without exposing private keys.
npm install @dcprotocol/mcp
npx @dcprotocol/mcp
Available tools:
vault_list_scopesvault_get_addressvault_budget_checkvault_readvault_sign_txvault_unlockvault_lockvault_read
{ scope, fields? }fields (optional) lets the agent request a subset of keys.vault_sign_tx
{ chain, unsigned_tx, description?, amount?, currency?, destination?, idempotency_key? }amount + currency if provided.vault_budget_check
{ amount, currency, chain? }{ allowed, remaining, limits, requires_approval }MCP is a separate process and must be unlocked before reads/signing:
vault_unlock({ "passphrase": "..." })
To avoid typing your passphrase in chat, use the local UI:
npx @dcprotocol/serverhttp://127.0.0.1:8420First access requires approval. You can approve via:
dcp approve <consent_id> --sessionhttp://127.0.0.1:8420By default MCP runs in non‑TTY mode: it creates a pending consent and waits until you approve via UI/CLI.
To enable interactive terminal prompts, set DCP_MCP_ALLOW_TTY=1.
For stable sessions across restarts, set a fixed agent name:
MCP_AGENT_NAME=claude-desktop
| Variable | Purpose | Default |
|---|---|---|
VAULT_DIR | Vault storage directory | ~/.dcp |
DCP_MCP_ALLOW_TTY | Enable terminal consent prompts | 0 |
MCP_AGENT_NAME | Stable agent name for session reuse | MCP Agent |
DCP_MCP_SESSION_MINUTES | Auto‑unlock window after UI unlock | 30 |
{
"mcpServers": {
"dcp": {
"command": "npx",
"args": ["@dcprotocol/mcp"]
}
}
}
Docs: see the root README for full usage and architecture.
FAQs
MCP Server for DCP Vault - Agent interface for secure wallet signing and data access
The npm package @dcprotocol/mcp receives a total of 9 weekly downloads. As such, @dcprotocol/mcp popularity was classified as not popular.
We found that @dcprotocol/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.