
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@flarewatch/mcp
Advanced tools
stdio→HTTPS bridge for the FlareWatch MCP server. Lets stdio-only MCP clients (Claude Desktop, Cursor, Continue, Cline) attach via `npx @flarewatch/mcp` to access Flare and Songbird validator scores, FTSO provider data, prices, network state, and OAuth-sc
stdio→HTTPS bridge for the FlareWatch MCP server.
Lets stdio-only MCP clients (Claude Desktop, Cursor, Continue, Cline)
reach the remote endpoint at https://mcp.flarewatch.io/api/mcp
without each client having to implement the Streamable HTTP transport.
Public (no auth):
get_flare_validators · get_validator_score · get_ftso_providers · get_ftso_provider_metrics · get_network_status · get_flarewatch_validator · get_flarewatch_sgb_entity · get_flare_prices · get_recent_agent_actions · get_agent_capabilities · compare_validators · compare_ftso_providers · verify_response
Wallet-scoped (OAuth 2.1 + PKCE):
get_my_delegations · get_my_claimable · get_my_portfolio_summary · get_my_tax_records
No install needed — npx will fetch on demand:
npx -y @flarewatch/mcp
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"flarewatch": {
"command": "npx",
"args": ["-y", "@flarewatch/mcp"]
}
}
}
Restart Claude Desktop. The 13 FlareWatch tools (validators, FTSO providers, scoring methodology, agent transparency, etc.) become available in every conversation.
Cursor supports Streamable HTTP natively — you don't need this bridge. Configure directly:
{
"url": "https://mcp.flarewatch.io/api/mcp"
}
{
"experimental": {
"modelContextProtocolServers": [
{
"transport": { "type": "stdio", "command": "npx", "args": ["-y", "@flarewatch/mcp"] }
}
]
}
}
| Variable | Default | Purpose |
|---|---|---|
FLAREWATCH_MCP_URL | https://mcp.flarewatch.io/api/mcp | Endpoint to forward to. Useful for preview deploys or local dev. |
FLAREWATCH_MCP_TIMEOUT_MS | 30000 | Per-request HTTP timeout in ms. |
It's intentionally dumb. ~150 LoC. The server is the single source of truth for:
The bridge just forwards JSON-RPC frames between stdio and HTTPS. No caching, no retries, no fallback. If the remote endpoint is down, the bridge surfaces the upstream error rather than attempting recovery.
Every tool response carries a verification_signature HMAC. To verify
a citation came from this server, call the verify_response tool with
the cited payload + signature.
FAQs
stdio→HTTPS bridge for the FlareWatch MCP server. Lets stdio-only MCP clients (Claude Desktop, Cursor, Continue, Cline) attach via `npx @flarewatch/mcp` to access Flare and Songbird validator scores, FTSO provider data, prices, network state, and OAuth-sc
The npm package @flarewatch/mcp receives a total of 30 weekly downloads. As such, @flarewatch/mcp popularity was classified as not popular.
We found that @flarewatch/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.