
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@idosgames/mcp
Advanced tools
MCP server that serves the iDosGames Module & Skills Registry to AI coding agents (Claude Code, Codex, Cursor…): list/pull composable game modules and the host scaffold, and load skills for @idosgames/core, the module contract, and composition.
An MCP server that serves the iDosGames Module & Skills Registry to AI coding agents
(Claude Code, Codex, Cursor, …). It lets an agent discover and pull composable game modules and
the host scaffold, and load skills for @idosgames/core, the module contract, and
composition.
Runs over stdio via npx — no install needed:
{
"mcpServers": {
"idosgames": {
"command": "npx",
"args": ["-y", "@idosgames/mcp"],
},
},
}
claude mcp add idosgames -- npx -y @idosgames/mcpThe registry is bundled in the package, so it works offline. To point at the hosted registry instead
(always the newest, published to the CDN by npm run push:registry), set:
IDOSGAMES_REGISTRY_URL=https://cloud.idosgames.com/drive/registry/latest
| Tool | Purpose |
|---|---|
list_modules | Catalog of modules (id, name, type, engine, genre, deps) |
get_module {id} | One module's full source + install/registration instructions |
list_skills | Available skills (name + description) |
get_skill {name} | A skill's full SKILL.md + reference files |
get_host_scaffold | The host-shell files for a new project |
get_manifest | @idosgames runtime packages + exact versions |
search {query} | Keyword search over modules and skills |
validate_asset | Check a video-studio asset with the studio's own validator |
validate_video | Check a video package { spec, assets }; title_id → link |
Tools return content; the agent writes files into its own project (standard MCP pattern). A
typical flow: get_host_scaffold → write to root → get_module {id} for each chosen module → write
to src/modules/{id}/ and register in src/modules.ts → install get_manifest versions.
validate_asset / validate_video run the code of @idosgames/timeline bundled into this server —
the same checks a player's studio makes when it opens a video, free and offline. The paid steps
(plan_video, generate_asset) are on the platform server below.
This server serves game code. A Title's live data — its configuration, AI-generated assets, the
publisher's task board and build uploads — is a separate hosted server:
https://site.idosgames.com/api/v2/mcp (Streamable HTTP, OAuth 2.1; connect it with no headers — the
first tool call starts the sign-in). Both are listed at
github.com/iDos-Games/idosgames-mcp and documented at
idosgames.com/mcp.
MIT
FAQs
MCP server that serves the iDosGames Module & Skills Registry to AI coding agents (Claude Code, Codex, Cursor…): list/pull composable game modules and the host scaffold, and load skills for @idosgames/core, the module contract, and composition.
The npm package @idosgames/mcp receives a total of 457 weekly downloads. As such, @idosgames/mcp popularity was classified as not popular.
We found that @idosgames/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.