
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@metalift/mcp
Advanced tools
Metalift MCP server for AI agents. Exposes scrape, crawl, map, and batch tools over stdio for Cursor, Claude Desktop, and other MCP clients.
Metalift Cloud is a hosted web context platform — scrape, crawl, and map sites into LLM-ready markdown for AI agents. This MCP server connects your AI client to the Metalift API.
New accounts receive 1,000 free credits/month. Set METALIFT_API_KEY in your MCP config (see below). Do not commit keys to git.
Add to your MCP client config:
{
"mcpServers": {
"metalift": {
"command": "npx",
"args": ["-y", "@metalift/mcp"],
"env": {
"METALIFT_API_URL": "https://api.metalift.ai",
"METALIFT_API_KEY": "YOUR_API_KEY"
}
}
}
}
| Variable | Description |
|---|---|
METALIFT_API_URL | Metalift scrape API base URL (default: http://localhost:8080) |
METALIFT_API_KEY | Bearer token for authenticated API access |
| Tool | Description |
|---|---|
metalift_scrape | Scrape a single URL |
metalift_batch_scrape | Scrape multiple URLs |
metalift_crawl | Crawl a website |
metalift_map | Discover site URLs |
metalift_job_status | Poll async jobs |
metalift_list_strategies | List scrape strategies |
metalift_warm_session | Warm WAF/retail cookies |
metalift_list_sessions | List stored domain sessions |
FAQs
Metalift MCP server for AI agents
The npm package @metalift/mcp receives a total of 58 weekly downloads. As such, @metalift/mcp popularity was classified as not popular.
We found that @metalift/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.