
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
@ethersflow/mcp-server
Advanced tools
Model Context Protocol (MCP) server for EthersFlow — run proposed agent actions through federated adversarial multi-model consensus before executing them.
Model Context Protocol (MCP) server for EthersFlow — the multi-model trust layer that verifies AI outputs and agent action directives through adversarial consensus before execution.
npx @ethersflow/mcp-server --api-key=YOUR_API_KEY
git clone https://github.com/Ethersflow/EthersFlow.git
cd EthersFlow/mcp-server
npm install
npm start
Connect your MCP client directly to EthersFlow's production endpoint:
https://www.ethersflow.com/api/mcpAuthorization: Bearer YOUR_API_KEYAdd EthersFlow to your claude_desktop_config.json:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"ethersflow": {
"command": "npx",
"args": ["-y", "@ethersflow/mcp-server"],
"env": {
"ETHERSFLOW_TOKEN": "YOUR_API_KEY",
"ETHERSFLOW_BASE_URL": "https://www.ethersflow.com"
}
}
}
}
{
"mcpServers": {
"ethersflow": {
"command": "node",
"args": ["/path/to/EthersFlow/mcp-server/index.js"],
"env": {
"ETHERSFLOW_TOKEN": "YOUR_API_KEY",
"ETHERSFLOW_BASE_URL": "https://www.ethersflow.com"
}
}
}
}
In Cursor Settings → MCP Servers → Add New MCP Server:
ethersflowcommandnpx -y @ethersflow/mcp-server (or node /path/to/EthersFlow/mcp-server/index.js)ETHERSFLOW_TOKEN: YOUR_API_KEYETHERSFLOW_BASE_URL: https://www.ethersflow.comTo publish this package to npm under @ethersflow/mcp-server:
# 1. Navigate to mcp-server package directory
cd mcp-server
# 2. Authenticate with your npm account / organization
npm login
# 3. Publish public scoped package
npm publish --access public
verify_agent_actionThe server exposes a single typed tool:
verify_agent_action({
agent_action: string; // Required: Proposed action directive
reasoning_chain?: string; // Optional: Reasoning or background context
agent_count?: number; // Optional: Number of audit nodes (2 to 7, default 3)
persona_preset?: string; // Optional: "financial_compliance" | "clinical_safety" | "legal_citation" | "cybersecurity_auditor" | "general_adversarial"
})
{
"agent_action": "Transfer 5000 USDC to wallet 0x9f for smart-contract audit",
"reasoning_chain": "Vendor request via email notification",
"persona_preset": "financial_compliance"
}
{
"status": "FLAGGED_HUMAN_REVIEW",
"verified": false,
"consensus_score": 72.5,
"risk_index": 42.0,
"verdict_summary": "FLAGGED FOR HUMAN REVIEW: Audit node analysis identified unverified risk factors or compliance concerns (1/3 flagged caution). Manual operator sign-off required prior to execution.",
"adversarial_debate": [
{
"role": "Direct Pragmatist",
"perspective": "FLAGGED: Unverified wallet recipient 0x9f requires manual KYC validation.",
"node_status": "FLAGGED_HUMAN_REVIEW",
"attestation_status": "VERIFIED_ED25519_SIG"
}
]
}
EthersFlow operates on a strict Zero-Data-Retention (ZDR) policy. Submitted prompts and action chains are processed strictly in volatile memory and never stored, logged to disk, or used for model training.
For full API reference and Ed25519 attestation details, visit EthersFlow Documentation.
FAQs
Model Context Protocol (MCP) server for EthersFlow — run proposed agent actions through federated adversarial multi-model consensus before executing them.
The npm package @ethersflow/mcp-server receives a total of 35 weekly downloads. As such, @ethersflow/mcp-server popularity was classified as not popular.
We found that @ethersflow/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.