
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@layerhop/mcp
Advanced tools
LayerHop MCP server: let AI agents (Claude, ChatGPT, Cursor, ...) quote and prepare cross-chain swaps. Holds no keys and never signs.
Model Context Protocol server for LayerHop: AI agents (Claude, ChatGPT, Cursor, …) can list chains and tokens, get best-price cross-chain / same-chain swap quotes with every fee spelled out, and hand the user a prefilled swap link.
The server holds no private keys and never signs or broadcasts. The user's own wallet signs.
Listed in the official MCP Registry as com.layerhop/mcp.
# stdio (Claude Desktop, Claude Code, Cursor, …)
npx -y @layerhop/mcp
claude mcp add layerhop -- npx -y @layerhop/mcp
# hosted, Streamable HTTP
claude mcp add --transport http layerhop https://mcp.layerhop.com/mcp
# self-host over HTTP: POST /mcp, GET /healthz
npx -y @layerhop/mcp --http --port 8090 --host 0.0.0.0
Env: LAYERHOP_API_URL (default https://api.layerhop.com), LAYERHOP_API_KEY (optional; required for deposit addresses), LAYERHOP_INTEGRATOR (optional partner id), LAYERHOP_APP_URL (default https://layerhop.com).
Tools: list_chains, list_tokens, get_quote, get_swap_link, build_transaction, simulate_transaction, report_submitted, get_order_status, list_orders, plus deposit addresses (API key required): create_deposit_address, list_deposit_addresses, get_deposit_address, refresh_deposit_address, disable_deposit_address, simulate_deposit (test keys only). Amounts in tool inputs are human decimals ("100" = 100 USDC).
Full guide: https://docs.layerhop.com/guides/ai-agents
MIT licensed.
FAQs
LayerHop MCP server: let AI agents (Claude, ChatGPT, Cursor, ...) quote and prepare cross-chain swaps. Holds no keys and never signs.
The npm package @layerhop/mcp receives a total of 573 weekly downloads. As such, @layerhop/mcp popularity was classified as not popular.
We found that @layerhop/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.