
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@imba_wallet/agent-mcp
Advanced tools
IMBA prepaid agent MCP: USDT TRC-20 deposit and catalog buy with your Ed25519 key. No withdraw, C2C as payer, or convert. Humans may C2C to this client_id. Not a ChatGPT money plugin.
Prepaid agent MCP: USDT TRC-20 deposit and catalog buy (cards, eSIM, gifts) using your Ed25519 key.
Not Partner B2B. Not a ChatGPT money plugin. No withdraw, C2C as payer, convert, Stars,
EVM, BTC, or Altyn. Humans may C2C to this client_id. Raising agent_tier does not unlock cash-out.
{
"mcpServers": {
"imba-agent": {
"command": "npx",
"args": ["-y", "@imba_wallet/agent-mcp"],
"env": {
"IMBA_AGENT_CLIENT_ID": "123",
"IMBA_AGENT_PRIVATE_KEY": "-----BEGIN PRIVATE KEY-----\\n...\\n-----END PRIVATE KEY-----"
}
}
}
}
Windows / Cursor: npx.cmd used to break scoped bins. npm 0.1.4 matches SQL webhook URL rules, caps streamed MCP bodies, omits unused allowlist GETs, and keeps KYT / card JWE / HMAC tools. Prefer node mcp/scripts/run-npx-mcp.mjs @imba_wallet/agent-mcp (or run-spend-npx.mjs with gitignored operator secrets).
Remote Streamable HTTP: https://imbawallet.com/mcp/spend with headers
X-IMBA-Agent-Client-Id and X-IMBA-Agent-Private-Key. The private-key header
must be one line (PEM with \n escapes, or base64url). A Wallet JWT or
agent access token is not accepted. IMBA does not host a shared spend wallet.
register_agent is stdio-only.
Always re-fetch get_deposit_address before sending USDT. Pass ext_id on buys.
Optional email on register_agent receives 3-D Secure OTP. Never SMS.
FAQs
IMBA prepaid agent MCP: USDT TRC-20 deposit and catalog buy with your Ed25519 key. No withdraw, C2C as payer, or convert. Humans may C2C to this client_id. Not a ChatGPT money plugin.
We found that @imba_wallet/agent-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.