
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@maacgo/mcp
Advanced tools
MCP server for MAAC Go · lets Claude / Cursor / Windsurf send SMS, pull logs, check wallet via the MAAC Go REST API.
MCP (Model Context Protocol) server for MAAC Go · lets Claude / Cursor / Windsurf / any MCP-aware client send SMS, pull delivery logs, and check your wallet through your MAAC Go account.
Two ways to run it — pick one.
{
"mcpServers": {
"maacgo": {
"command": "npx",
"args": ["-y", "@maacgo/mcp"],
"env": { "MAACGO_API_KEY": "sk_live_..." }
}
}
}
claude_desktop_config.json or Cursor's mcp.json.MAACGO_API_KEY accepts sk_live_ or sk_test_; sending follows the account wallet and deployment adapter settings.MAACGO_BASE_URL for staging or self-host.Same tool set, no npm install, authenticate on each request.
{
"mcpServers": {
"maacgo": {
"url": "https://sms.cresclab.com/api/mcp",
"headers": { "Authorization": "Bearer sk_live_..." }
}
}
}
| Tool | Scope | Does |
|---|---|---|
send_sms | sms.send | Send one SMS |
list_sms | sms.read | Recent messages (filter by status / since) |
get_sms | sms.read | One message by id |
sms_metrics | sms.read | N-day delivery + cost stats |
send_broadcast | broadcast.send | 1:N send, optional schedule |
list_broadcasts | broadcast.read | Campaign list with per-campaign stats |
wallet_balance | wallet.read | Current NT$ balance |
wallet_events | wallet.read | Ledger entries (topups / charges / refunds) |
get_me | account.read | Account profile |
Scopes are enforced by the backend — a key without broadcast.send scope will get a 403 no matter which transport the call came through.
sk_... (shown once)MIT
FAQs
MCP server for MAAC Go · lets Claude / Cursor / Windsurf send SMS, pull logs, check wallet via the MAAC Go REST API.
We found that @maacgo/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.