
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@flarewatch/mcp
Advanced tools
stdio→HTTPS bridge for the FlareWatch MCP server. Lets stdio-only MCP clients (Claude Desktop, Cursor, Continue, Cline) attach via `npx @flarewatch/mcp` to access Flare and Songbird validator scores, FTSO provider data, prices, network state, and OAuth-sc
Bring the Flare network into your AI assistant.
Validator scores, FTSO providers, prices, your delegations — all read-only, all attributed.
A thin stdio↔HTTPS bridge for the FlareWatch MCP server at https://mcp.flarewatch.io/api/mcp. Lets stdio-only MCP clients (Claude Desktop, Cline, older Cursor / Continue builds) reach the remote endpoint without each client having to implement the Streamable HTTP transport.
If your client speaks Streamable HTTP natively (recent Cursor, Continue), you don't need this bridge — point your client at the URL directly.
source, methodology_uri, data_freshness, and an HMAC verification_signature. AI clients can cite specifically and other AIs can verify.| Tool | What it returns |
|---|---|
get_flare_validators | Top-N Flare validators sortable by score / stake / APY |
get_validator_score | Full per-dimension breakdown for one NodeID |
get_ftso_providers | FTSO data providers on Flare or Songbird |
get_ftso_provider_metrics | Detailed metrics for one provider |
get_network_status | Current reward-epoch state on either network |
get_flarewatch_validator | FlareWatch's own validator stats (same scoring as everyone) |
get_flarewatch_sgb_entity | FlareWatch's SGB FTSO entity (live on-chain) |
get_flare_prices | FLR / SGB / XRP prices in USD + fiat |
get_recent_agent_actions | FlareWatch autonomous agent's action feed |
get_agent_capabilities | Agent's autonomy by playbook family |
compare_validators | Side-by-side up to 10 validators |
compare_ftso_providers | Side-by-side up to 10 providers |
verify_response | HMAC-verify a previously-served response |
| Tool | What it returns |
|---|---|
get_my_delegations | Your WFLR FTSO + P-chain validator delegations |
get_my_claimable | Your claimable rewards across networks |
get_my_portfolio_summary | Your FLR + SGB balances + USD valuations |
get_my_tax_records | Structured tax line items — NOT tax advice |
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"flarewatch": {
"command": "npx",
"args": ["-y", "@flarewatch/mcp"]
}
}
}
Cmd-Q Claude Desktop fully (close window isn't enough), reopen. New conversation → tools icon → confirm flarewatch shows up.
Cursor speaks Streamable HTTP natively — skip this bridge:
{
"url": "https://mcp.flarewatch.io/api/mcp"
}
.continue/config.json:
{
"experimental": {
"modelContextProtocolServers": [
{
"transport": {
"type": "streamableHttp",
"url": "https://mcp.flarewatch.io/api/mcp"
}
}
]
}
}
Same as Claude Desktop — Cline's MCP config accepts the same npx -y @flarewatch/mcp invocation.
npx -y @flarewatch/mcp
The bridge speaks MCP-over-stdio on its standard input/output and forwards every JSON-RPC frame to the remote endpoint over HTTPS.
curl -s -X POST https://mcp.flarewatch.io/api/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | jq .
Paste any of these into Claude / Cursor / Continue:
flarewatch.io/services/mcp/authorize)| Variable | Default | Purpose |
|---|---|---|
FLAREWATCH_MCP_URL | https://mcp.flarewatch.io/api/mcp | Endpoint to forward to. Useful for preview deploys or local dev. |
FLAREWATCH_MCP_TIMEOUT_MS | 30000 | Per-request HTTP timeout. |
Every tool response carries a verification_signature HMAC. To verify a citation came from this server:
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "verify_response",
"arguments": {
"payload": { ... the structured response without verification_signature ... },
"signature": "the signature you received"
}
}
}
Returns { "valid": true } if the signature matches the canonical payload.
It's intentionally dumb (~150 LoC). All real logic — tool definitions, rate limiting, output classification, quarantine, audit logging, response signing — lives in the server at mcp.flarewatch.io/api/mcp. The bridge just forwards JSON-RPC frames between stdio and HTTPS.
No caching. No retries. No fallback. If the remote endpoint is down, the bridge surfaces the upstream error rather than attempting recovery.
flarewatch://methodology/scoring (resources/read)MIT.
FAQs
stdio→HTTPS bridge for the FlareWatch MCP server. Lets stdio-only MCP clients (Claude Desktop, Cursor, Continue, Cline) attach via `npx @flarewatch/mcp` to access Flare and Songbird validator scores, FTSO provider data, prices, network state, and OAuth-sc
The npm package @flarewatch/mcp receives a total of 22 weekly downloads. As such, @flarewatch/mcp popularity was classified as not popular.
We found that @flarewatch/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.