
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@keepmysubs/mcp
Advanced tools
Model Context Protocol server for KeepMySubs — let your AI agent read and manage your subscriptions, spend, renewals, and bills.
An MCP server that lets AI assistants (Claude Desktop, Cursor, OpenAI Codex CLI, etc.) read and manage your KeepMySubs subscriptions over the KeepMySubs Agent API. It runs locally over stdio and talks to the KeepMySubs API using a personal API key.
Prefer no API key? KeepMySubs also runs a hosted, OAuth-authenticated MCP server at
https://keepmysubs.com/mcp— connect it from ChatGPT (developer mode) or Codex (codex mcp add … --url) and authorize in the browser instead of managing a key. See the Codex CLI section below anddocs/distribution/openai-codex-submission.md.
In the KeepMySubs web app, go to Settings → API keys and create a new key. Copy it — it looks like kms_live_… and is shown only once.
Add the server to your MCP client's config (for Claude Desktop, this is claude_desktop_config.json):
{
"mcpServers": {
"keepmysubs": {
"command": "npx",
"args": ["-y", "@keepmysubs/mcp"],
"env": {
"KMS_API_KEY": "kms_live_…"
}
}
}
}
Restart your MCP client. If KMS_API_KEY is missing the server exits immediately with a message telling you to set it.
By default the server talks to the production KeepMySubs API. Set KMS_BASE_URL in the env block to point at a different host (for example a staging or local instance).
OpenAI Codex supports MCP servers two ways.
Run this package over stdio (API key):
codex mcp add keepmysubs --env KMS_API_KEY=kms_live_… -- npx -y @keepmysubs/mcp
Or connect the hosted server over OAuth (no API key):
codex mcp add keepmysubs --url https://keepmysubs.com/mcp
codex mcp login keepmysubs # opens the browser to authorize
List and verify with codex mcp list. The OAuth route uses the same consent screen as every other KeepMySubs connector.
The server exposes 15 tools: list_subscriptions, get_subscription, create_subscription, update_subscription, delete_subscription, get_spend_summary, list_upcoming_renewals, list_recent_charges, record_charge, list_alerts, dismiss_alert, list_pending_bills, accept_bill, reject_bill, and parse_bill.
FAQs
Model Context Protocol server for KeepMySubs — let your AI agent read and manage your subscriptions, spend, renewals, and bills.
The npm package @keepmysubs/mcp receives a total of 28 weekly downloads. As such, @keepmysubs/mcp popularity was classified as not popular.
We found that @keepmysubs/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.