
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@metalift/mcp
Advanced tools
Metalift MCP server for AI agents. Exposes scrape, crawl, map, and batch tools over stdio for Cursor, Claude Desktop, and other MCP clients.
Metalift Cloud is a hosted web context platform — scrape, crawl, and map sites into LLM-ready markdown for AI agents. This MCP server connects your AI client to the Metalift API.
New accounts receive 1,000 free credits/month. Set METALIFT_API_KEY in your MCP config (see below). Do not commit keys to git.
Published on npm as @metalift/mcp. Default config uses npx:
{
"mcpServers": {
"metalift": {
"command": "npx",
"args": ["-y", "@metalift/mcp"],
"env": {
"METALIFT_API_URL": "https://api.metalift.ai",
"METALIFT_API_KEY": "YOUR_API_KEY"
}
}
}
}
Claude Desktop: paste the same JSON into claude_desktop_config.json (Settings → Developer → Edit Config). See MCP setup — Claude Desktop and examples/claude-mcp.json.
Corporate Windows / SSL inspection: if npx fails with UNABLE_TO_VERIFY_LEAF_SIGNATURE, install locally and use node — see examples/claude-mcp-local.json / cursor-mcp-local.json and MCP setup troubleshooting.
| Error | Cause | Fix |
|---|---|---|
Failed to acquire MessagePort | Cursor IDE bug on Windows | Reload window, restart Cursor — details |
UNABLE_TO_VERIFY_LEAF_SIGNATURE | Corporate SSL inspection blocks npm | Local install + node path — details |
| 401 / 402 at runtime | Auth or billing | Check API key and subscription |
Full guide: packages/platform-web/docs/mcp-setup.md.
Search and scrape are separate tools with separate billing:
metalift_web_search — returns up to 10 search snippets (2 credits, English by default). Review titles and snippets first.metalift_scrape — fetches page content for URLs you choose (1+ credits per URL). Default response_detail=compact (~16k chars, no link lists). Use standard for full articles or full for raw JSON with all links.Do not auto-scrape every search result. See Web search for agent workflow examples.
| Variable | Description |
|---|---|
METALIFT_API_URL | Metalift scrape API base URL (default: https://api.metalift.ai) |
METALIFT_API_KEY | Bearer token for authenticated API access |
| Tool | Description |
|---|---|
metalift_scrape | Scrape a single URL (default: fast direct static markdown, response_detail=compact; use standard / full for more) |
metalift_batch_scrape | Scrape multiple URLs (same response_detail; default compact) |
metalift_crawl | Crawl a website |
metalift_map | Discover site URLs from page HTML links |
metalift_sitemap | Fetch XML sitemap URLs (robots.txt / sitemap.xml) |
metalift_web_search | Web search — top 10 SERP results (title, url, snippet). 2 credits per search. Does not fetch page content; use metalift_scrape separately for URLs you need |
metalift_job_status | Poll async jobs |
metalift_list_strategies | List scrape strategies |
metalift_warm_session | Warm WAF/retail cookies |
metalift_list_sessions | List stored domain sessions |
FAQs
Metalift MCP server for AI agents
The npm package @metalift/mcp receives a total of 48 weekly downloads. As such, @metalift/mcp popularity was classified as not popular.
We found that @metalift/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.