
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@forgemeshlabs/voice-mcp
Advanced tools
Give Your Agent A Voice: x402 pay-per-call speech with 20 voices, 10 personas, 31 languages, granular speed and quality controls, OpenAI-shaped requests, and batch audio
Give Your Agent A Voice: x402 pay-per-call speech with 20 voices, 10 personas, 31 languages, granular speed and quality controls, OpenAI-shaped requests, and batch audio.
This MCP wraps https://voice.forgemesh.io, an x402 Voice API with standard voices, persona voices, OpenAI-shaped speech requests, 31 languages, speed controls, quality controls, and batch generation. Payments are made per call in USDC on Base.
M1-M5, F1-F5Storyteller, Narrator, Announcer, Assistant, Urgent, Sage, Spark, Anchor, Velvet, Echoen, ko, ja, ar, bg, cs, da, de, el, es, et, fi, fr, hi, hr, hu, id, it, lt, lv, nl, pl, pt, ro, ru, sk, sl, sv, tr, uk, vi0.7x-2.0x, quality steps 1-100, persona selection, OpenAI-shaped audio format requests, and batch generation for up to 20 textsaudio_base64 WAV output| Tool | Price | Purpose |
|---|---|---|
list_voice_catalog | Free | Voices, personas, languages, pricing, buckets, and controls |
generate_standard_voice | $0.001 / $0.003 | Low-cost speech with 10 standard voices |
generate_controlled_voice | $0.003 / $0.006 | Speech with granular speed and quality controls |
generate_persona_voice | $0.005 / $0.01 | Storyteller, Velvet, Narrator, Announcer, Assistant, Urgent, and more |
generate_openai_compatible_voice | $0.001 / $0.003 | OpenAI-shaped /v1/audio/speech request |
generate_batch_voices | $0.002 / $0.005 | Up to 20 texts per call |
Short prices apply to 1-500 characters. Long prices apply to 501-2000 characters.
The MCP validates voice names, language codes, audio formats, speed/quality ranges, batch item count, and character limits locally before making a paid x402 call.
npm install -g @forgemeshlabs/voice-mcp
Build:
docker build -t voice-mcp .
Run over stdio:
docker run --rm -i \
-e WALLET_PRIVATE_KEY=0x... \
voice-mcp
CMD arguments:
["node", "index.js"]
{
"mcpServers": {
"voice": {
"command": "voice-mcp",
"env": {
"WALLET_PRIVATE_KEY": "0x..."
}
}
}
}
Optional:
{
"X402_VOICE_BASE_URL": "https://voice.forgemesh.io",
"BASE_RPC_URL": "https://mainnet.base.org"
}
audio_base64 for audio tools so MCP clients can store, play, or forward the WAV bytes.FAQs
Give Your Agent A Voice: x402 pay-per-call speech with 20 voices, 10 personas, 31 languages, granular speed and quality controls, OpenAI-shaped requests, and batch audio
The npm package @forgemeshlabs/voice-mcp receives a total of 27 weekly downloads. As such, @forgemeshlabs/voice-mcp popularity was classified as not popular.
We found that @forgemeshlabs/voice-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.