
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@metalift/mcp
Advanced tools
Metalift MCP server for AI agents. Exposes scrape, crawl, map, and batch tools over stdio for Cursor, Claude Desktop, and other MCP clients.
Metalift Cloud is a hosted web context platform — scrape, crawl, and map sites into LLM-ready markdown for AI agents. This MCP server connects your AI client to the Metalift API.
New accounts receive 1,000 free credits/month. Set METALIFT_API_KEY in your MCP config (see below). Do not commit keys to git.
Published on npm as @metalift/mcp. Default config uses npx:
{
"mcpServers": {
"metalift": {
"command": "npx",
"args": ["-y", "@metalift/mcp"],
"env": {
"METALIFT_API_URL": "https://api.metalift.ai",
"METALIFT_API_KEY": "YOUR_API_KEY"
}
}
}
}
Corporate Windows / SSL inspection: if npx fails with UNABLE_TO_VERIFY_LEAF_SIGNATURE, install locally and use node — see examples/cursor-mcp-local.json and MCP setup troubleshooting.
| Error | Cause | Fix |
|---|---|---|
Failed to acquire MessagePort | Cursor IDE bug on Windows | Reload window, restart Cursor — details |
UNABLE_TO_VERIFY_LEAF_SIGNATURE | Corporate SSL inspection blocks npm | Local install + node path — details |
| 401 / 402 at runtime | Auth or billing | Check API key and subscription |
Full guide: packages/platform-web/docs/mcp-setup.md.
Search and scrape are separate tools with separate billing:
metalift_web_search — returns up to 10 search snippets (2 credits). Review titles and snippets first.metalift_scrape — fetches full page content for URLs you choose (1+ credits per URL).Do not auto-scrape every search result. See Web search for agent workflow examples.
| Variable | Description |
|---|---|
METALIFT_API_URL | Metalift scrape API base URL (default: https://api.metalift.ai) |
METALIFT_API_KEY | Bearer token for authenticated API access |
| Tool | Description |
|---|---|
metalift_scrape | Scrape a single URL (default: fast direct static markdown; use strategy: "auto" for WAF/SPA/retail) |
metalift_batch_scrape | Scrape multiple URLs |
metalift_crawl | Crawl a website |
metalift_map | Discover site URLs |
metalift_web_search | Web search — top 10 SERP results (title, url, snippet). 2 credits per search. Does not fetch page content; use metalift_scrape separately for URLs you need |
metalift_job_status | Poll async jobs |
metalift_list_strategies | List scrape strategies |
metalift_warm_session | Warm WAF/retail cookies |
metalift_list_sessions | List stored domain sessions |
FAQs
Metalift MCP server for AI agents
The npm package @metalift/mcp receives a total of 199 weekly downloads. As such, @metalift/mcp popularity was classified as not popular.
We found that @metalift/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.