
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@givewp/mcp-server
Advanced tools
A Model Context Protocol (MCP) server implementation for GiveWP that integrates with Elementor's Angie AI assistant.
# Using npm
npm install @givewp/mcp-server
# Using bun
bun add @givewp/mcp-server
Create an mcp.json
file with the following structure:
Using bun (recommended):
{
"mcpServers": {
"givewp-mcp": {
"command": "bunx",
"args": ["-y", "@givewp/mcp-server@latest"],
"env": {
"WP_REST_URL": "https://your-wordpress-site.com/wp-json",
"WP_USERNAME": "your-username",
"WP_APP_PASSWORD": "your-application-password",
"NODE_TLS_REJECT_UNAUTHORIZED": 1
}
}
}
}
Using npm:
{
"mcpServers": {
"givewp-mcp": {
"command": "npx",
"args": ["-y", "@givewp/mcp-server@latest"],
"env": {
"WP_REST_URL": "https://your-wordpress-site.com/wp-json",
"WP_USERNAME": "your-username",
"WP_APP_PASSWORD": "your-application-password",
"NODE_TLS_REJECT_UNAUTHORIZED": 1
}
}
}
}
Required environment variables:
WP_REST_URL
: Your WordPress site's REST API URLWP_USERNAME
: Your WordPress usernameWP_APP_PASSWORD
: Your WordPress application passwordAdd and customize the above configuration. For more information, read the Cursor MCP documentation or the Claude Desktop MCP guide.
Using bun:
claude mcp add givewp \
--env WP_REST_URL=https://your-wordpress-site.com/wp-json \
--env WP_USERNAME=admin \
--env WP_APP_PASSWORD='XXXX XXXX XXXX XXXX XXXX XXXX' \
-- \
bunx -y @givewp/mcp-server@latest
Using npm:
claude mcp add givewp \
--env WP_REST_URL=https://your-wordpress-site.com/wp-json \
--env WP_USERNAME=admin \
--env WP_APP_PASSWORD='XXXX XXXX XXXX XXXX XXXX XXXX' \
-- \
npx -y @givewp/mcp-server@latest
[!IMPORTANT] You need an accessible WordPress installation with GiveWP installed that the MCP Server can talk to.
The easiest way to test the tools for valid REST connectivity is to use the MCP Inspector.
env
values.Run this in your terminal, and it will automatically launch the MCP Inspector and allow you to run an instance of the server locally:
npx @modelcontextprotocol/inspector --config path/to/your/mcp.json
[!TIP] If you're testing this against a local WordPress install that does not have a valid SSL certificate, set
NODE_TLS_REJECT_UNAUTHORIZED
to0
in themcp.json
to allow API requests to complete. Note: This should only be used in development environments, never in production.
[!IMPORTANT]
Copy the .env.example to an.env
file in your current working directory and fill it out according to the configuration.
# Start the MCP Server with bunx
bunx -y @givewp/mcp-server@latest
# Start the MCP Server with npx
npx -y @givewp/mcp-server@latest
# Or if cloned locally
bun run src/cli.ts
This server can be integrated with Elementor's Angie AI assistant:
import register from '@givewp/mcp-server/angie';
// Register the MCP server with Angie
register().then(() => console.log('Angie MCP connection successful'));
To publish packages to NPM:
💡 The package version is set via
publish.yml
workflow, so just leave them all as0.0.0
.
1.0.1
)This will automatically trigger the publish.yml
GitHub workflow to publish all packages to NPM.
The server provides the following MCP tools:
[!NOTE]
Development requires bun.
# Install dependencies
bun install
# Build all packages
bun run build
# Run tests
bun run test
bun run build
- Build all packagesbun run dev
- Start development mode for all packagesbun run test
- Run test suitebun run test:ui
- Run tests with UIbun run test:coverage
- Generate test coverage reportbun run test:coverage:open
- Generate test coverage report and open it in your default browserbun run lint
- Run ESLintbun run lint:fix
- Fix ESLint problemsbun run format
- Check code formattingbun run format:fix
- Automatically fix formattingbun run typecheck
- Run TypeScript type checkingbun run clean
- Clean all temporary build foldersFAQs
A GiveWP MCP Server implementation
The npm package @givewp/mcp-server receives a total of 199 weekly downloads. As such, @givewp/mcp-server popularity was classified as not popular.
We found that @givewp/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.