
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@leanroute/mcp-server
Advanced tools
MCP server for Leanroute — lets agents (Claude Code, Cursor, Windsurf, Cline) list models, check pricing, route LLM calls, and manage keys/usage/credit on their Leanroute account.
Model Context Protocol server for Leanroute — an LLM gateway that lets your agent hit 13 providers (OpenAI, Anthropic, Google, xAI, DeepSeek, Groq, Meta, and more) through one API with prompt caching, semantic caching, failover, and per-key spend caps.
This package lets agents — Claude Code, Cursor, Windsurf, Cline, Claude Desktop — discover Leanroute as a tool source and use it directly.
| Tool | What it does |
|---|---|
list_models | List models this account can dispatch to |
get_pricing | Full pricing catalog (input/output $/M, cached-input discount) |
cheapest_for | Rank cheapest models for a task tier |
route_call | Dispatch an LLM completion (OpenAI chat-completions shape) |
get_usage | Aggregated spend, grouped by day/model/provider/key |
get_credit_balance | Current prepaid balance in USD |
list_keys | List runtime gateway keys |
create_runtime_key | Mint a new runtime key |
revoke_runtime_key | Revoke a runtime key |
The server cannot top up credit, upload BYOK provider keys, or mint admin keys. Those actions stay behind the dashboard for safety.
You don't have to install — just point your MCP client at npx @leanroute/mcp-server.
At https://leanroute.dev/dashboard/admin-keys, click New admin key and copy the gw_admin_* value.
If you want the agent to use the route_call tool (actually dispatch LLM completions through Leanroute), also mint a gw_live_* runtime key at https://leanroute.dev/dashboard/keys. Skip this if the agent only needs to check pricing/usage.
Claude Code / Claude Desktop (~/.config/claude/claude_desktop_config.json):
{
"mcpServers": {
"leanroute": {
"command": "npx",
"args": ["-y", "@leanroute/mcp-server"],
"env": {
"LEANROUTE_ADMIN_KEY": "gw_admin_xxx",
"LEANROUTE_RUNTIME_KEY": "gw_live_xxx"
}
}
}
}
Cursor — same shape under .cursor/mcp.json in your project or ~/.cursor/mcp.json globally.
Windsurf / Cline — check the tool's MCP configuration docs; the command + env format is the standard.
| Var | Required | Default | Notes |
|---|---|---|---|
LEANROUTE_ADMIN_KEY | yes | — | gw_admin_* from /dashboard/admin-keys |
LEANROUTE_RUNTIME_KEY | no | — | gw_live_* — only needed for route_call |
LEANROUTE_BASE_URL | no | https://api.leanroute.dev | Override for self-hosted instances |
/platform/v1/*. If an admin key leaks, the attacker cannot drain your LLM budget.Apache-2.0
FAQs
MCP server for Leanroute — lets agents (Claude Code, Cursor, Windsurf, Cline) list models, check pricing, route LLM calls, and manage keys/usage/credit on their Leanroute account.
We found that @leanroute/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.