
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@echorift/mcp
Advanced tools
MCP server for EchoRift infrastructure primitives (BlockWire, CronSynth, Switchboard, Arbiter)
Official MCP server for EchoRift infrastructure primitives (BlockWire, CronSynth, Switchboard, Arbiter). Makes EchoRift's agent infrastructure callable as MCP tools so any MCP client can treat EchoRift like a native capability layer.
npx @echorift/mcp
# BlockWire (optional, defaults to https://blockwire.echorift.xyz)
BLOCKWIRE_BASE_URL=https://blockwire.echorift.xyz
# CronSynth (optional, defaults to https://cronsynth.echorift.xyz)
CRONSYNTH_BASE_URL=https://cronsynth.echorift.xyz
CRONSYNTH_X402_SESSION=your-x402-session-token
# Switchboard (optional, defaults to https://switchboard.echorift.xyz/api/v1)
SWITCHBOARD_BASE_URL=https://switchboard.echorift.xyz/api/v1
SWITCHBOARD_AGENT_ID=0x...
SWITCHBOARD_PRIVATE_KEY=0x... # For automatic signing
# Arbiter (optional, defaults to https://arbiter.echorift.xyz)
ARBITER_BASE_URL=https://arbiter.echorift.xyz
# Feature flags
ECHORIFT_ENABLE_TREASURY=0 # Set to 1 to enable treasury tools
Use this configuration for Claude Desktop or any MCP client supporting stdio transport:
{
"mcpServers": {
"echorift": {
"command": "npx",
"args": ["@echorift/mcp"],
"env": {
"CRONSYNTH_X402_SESSION": "your-session",
"SWITCHBOARD_AGENT_ID": "0x...",
"SWITCHBOARD_PRIVATE_KEY": "0x..."
}
}
}
}
For clients supporting remote HTTP endpoints:
{
"mcpServers": {
"echorift": {
"url": "https://mcp.echorift.xyz/api/mcp",
"transport": "http"
}
}
}
Note: Stdio mode is recommended for production use. Remote HTTP support is available but may have limitations with serverless platforms.
The server supports both stdio (local) and remote HTTP endpoints. Stdio mode is recommended for production use as it provides better reliability and lower latency.
Stdio mode runs the server locally as a child process:
npx @echorift/mcp
This is the most reliable and performant option. See "MCP Client Configuration" above for config snippet.
For remote deployments (e.g., Vercel), the server exposes an HTTP endpoint:
Endpoint: https://mcp.echorift.xyz/api/mcp
Transport Type: streamable-http (compatible with MCP remote clients)
Usage:
{
"mcpServers": {
"echorift": {
"url": "https://mcp.echorift.xyz/api/mcp",
"transport": "http"
}
}
}
Note: Full HTTP/SSE transport requires long-running connections, which can be challenging with serverless platforms. Stdio mode is recommended for production use, but remote endpoint is available for clients that require it.
git clone https://github.com/echorift/echorift-mcp.git
cd echorift-mcp
vercel deploy
Set environment variables in Vercel dashboard:
CRONSYNTH_X402_SESSIONSWITCHBOARD_AGENT_IDSWITCHBOARD_PRIVATE_KEYConfigure domain: Point mcp.echorift.xyz to your Vercel deployment
Verify: Visit https://mcp.echorift.xyz/api/mcp (GET request) to verify server info
Different MCP clients support different transport modes:
Refer to your MCP client's documentation for remote server configuration options.
blockwire_subscribe_prepare_tx - Generate on-chain transaction payload for webhook subscriptionblockwire_feed - Pull recent blockchain events via x402 endpointcronsynth_schedule_create - Create a scheduled webhook trigger with cron expressioncronsynth_schedule_list - List all scheduled webhook triggerscronsynth_schedule_delete - Delete a scheduled webhook triggerswitchboard_task_enqueue - Enqueue a task to a swarm queueswitchboard_task_claim - Claim a task from a swarm queueswitchboard_task_complete - Mark a claimed task as completearbiter_lock_acquire - Acquire a distributed lock with fencing tokenarbiter_lock_release - Release a distributed lock using fencing tokenarbiter_leader_get - Get current leader for a swarmarbiter_election_run - Run a leader election for a swarmechorift://queues - Switchboard swarm queues and statsechorift://cron/jobs - CronSynth scheduled jobsechorift://blockwire/subscriptions - BlockWire webhook subscriptionsechorift://arbiter/locks - Active Arbiter distributed locksswarm-safe-cron - Create a swarm-safe task pipeline with cron schedulingchain-event-router - Subscribe to chain events and route tasks by event typedistributed-locking - Set up distributed locking for exclusive resource accessQuick reference for common needs:
cronsynth_schedule_createarbiter_lock_acquireswitchboard_task_*blockwire_*📖 Full Capability Map - Detailed guide with examples and use cases
📋 OpenAPI Specification - Complete API schema
ECHORIFT_ENABLE_TREASURY=1 to prevent accidental exposure in shared clients.MIT
FAQs
MCP server for EchoRift infrastructure primitives (BlockWire, CronSynth, Switchboard, Arbiter)
We found that @echorift/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.