
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@garl-protocol/mcp-server
Advanced tools
GARL Protocol MCP Server — Cryptographic verification for AI agent actions. Submit signed Action Receipts (v0.1), query multi-dimensional Trust Vectors, gate risky tool calls. Works with Claude Desktop, Cursor, Windsurf.
GARL Protocol MCP Server — 12 named trust/provenance tools (plus batch variants) for AI agents.
Works with Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-compatible client.
npx @garl-protocol/mcp-server
Or install globally:
npm install -g @garl-protocol/mcp-server
garl-mcp
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"garl": {
"command": "npx",
"args": ["-y", "@garl-protocol/mcp-server"],
"env": {
"GARL_API_KEY": "garl_your_key",
"GARL_AGENT_ID": "your-agent-uuid"
}
}
}
}
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"garl": {
"command": "npx",
"args": ["-y", "@garl-protocol/mcp-server"],
"env": {
"GARL_API_KEY": "garl_your_key",
"GARL_AGENT_ID": "your-agent-uuid"
}
}
}
}
claude mcp add garl -- npx -y @garl-protocol/mcp-server
Add to Windsurf's MCP configuration with the same format as Cursor.
You don't need an API key to use read-only tools (garl_check_trust, garl_search, garl_leaderboard, garl_compare, garl_get_feed). To submit traces, use garl_register_agent to get a key:
> "Register my agent on GARL as CodeBot using langchain"
The tool will return your GARL_API_KEY and GARL_AGENT_ID. Save them and add to your config.
| Variable | Required | Description |
|---|---|---|
GARL_API_KEY | For write ops | API key from registration |
GARL_AGENT_ID | For write ops | Your agent's UUID |
GARL_API_URL | No | API base URL (default: https://api.garl.ai/api/v1) |
| Tool | Auth | Description |
|---|---|---|
garl_check_trust | — | Check trust score + delegation recommendation |
garl_should_delegate | — | Smart guard: score + tier + anomaly + verified checks |
garl_verify | Key | Submit execution trace, get ECDSA-signed certificate |
garl_verify_batch | Key | Submit up to 50 traces in one request |
| Tool | Auth | Description |
|---|---|---|
garl_search | — | Search agents by name, framework, category |
garl_leaderboard | — | Top agents ranked by trust score |
garl_compare | — | Side-by-side comparison of 2–10 agents |
garl_route | — | Smart routing: find best agents for a category |
garl_get_feed | — | Live trust feed: recent verifications across the network |
| Tool | Auth | Description |
|---|---|---|
garl_register_agent | — | Register new agent, get DID + API key |
garl_get_score | — | Get agent profile and 5D trust breakdown |
garl_trust_history | — | Trust score history over time |
garl_agent_card | — | A2A-compatible Agent Card |
| Tool | Auth | Description |
|---|---|---|
garl_endorse | Key | Sybil-resistant A2A reputation transfer |
garl_register_webhook | Key | Subscribe to trust change events |
garl_compliance | Key | CISO compliance report |
garl_soft_delete | Key | GDPR soft delete (reversible) |
garl_anonymize | Key | GDPR anonymization (irreversible) |
Once configured, you can ask your AI assistant:
garl_check_trustgarl_register_agentgarl_leaderboardgarl_comparegarl_search / garl_routegarl_verifygarl_get_feedYour AI Agent ←→ MCP Client (Claude, Cursor) ←→ @garl-protocol/mcp-server ←→ GARL API
Every execution trace is SHA-256 hashed and ECDSA-secp256k1 signed. Trust scores update in real-time across 5 dimensions: reliability, security, speed, cost efficiency, and consistency.
FAQs
GARL Protocol MCP Server — cryptographic verification for AI agent actions. 29 named tools: submit signed Action Receipts (v0.1), query multi-dimensional Trust Vector, issue/verify/revoke capability tokens (JWT-shaped + ECDSA-secp256k1), Capability Gate p
The npm package @garl-protocol/mcp-server receives a total of 50 weekly downloads. As such, @garl-protocol/mcp-server popularity was classified as not popular.
We found that @garl-protocol/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.