
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@onflow/fcl
Advanced tools
High-level JavaScript/TypeScript library for building web applications on the Flow blockchain.
Connect your dapp to users, their wallets and Flow.
Quickstart
Β·
Report Bug
Β·
Contribute
The Flow Client Library (FCL) JS is a package designed to facilitate interactions between dapps, wallets, and the Flow blockchain. It provides a standardized way for applications to connect with users and their wallets, eliminating the need for custom integrations.
FCL was created to make building Flow-connected applications easy, secure, and scalable by defining standardized communication patterns between wallets, applications, and users.
For iOS, we also offer FCL Swift.
v12.0.0 or higher
.To use the FCL JS in your application, install using yarn or npm
npm i -S @onflow/fcl
yarn add @onflow/fcl
ES6
import * as fcl from "@onflow/fcl";
Node.js
const fcl = require("@onflow/fcl");
// in the browser
import * as fcl from "@onflow/fcl"
fcl.config({
"discovery.wallet": "https://fcl-discovery.onflow.org/testnet/authn", // Endpoint set to Testnet
})
fcl.authenticate()
Note: A Dapper Wallet developer account is required. To enable Dapper Wallet inside FCL, you need to follow this guide.
Learn more about wallet interactions >
import * as fcl from "@onflow/fcl";
const result = await fcl.query({
cadence: `
access(all) fun main(a: Int, b: Int, addr: Address): Int {
log(addr)
return a + b
}
`,
args: (arg, t) => [
arg(7, t.Int), // a: Int
arg(6, t.Int), // b: Int
arg("0xba1132bc08f82fe2", t.Address), // addr: Address
],
});
console.log(result); // 13
import * as fcl from "@onflow/fcl";
// in the browser, FCL will automatically connect to the user's wallet to request signatures to run the transaction
const txId = await fcl.mutate({
cadence: `
import Profile from 0xba1132bc08f82fe2
transaction(name: String) {
prepare(account: AuthAccount) {
account.borrow<&{Profile.Owner}>(from: Profile.privatePath)!.setName(name)
}
}
`,
args: (arg, t) => [arg("myName", t.String)],
});
Learn more about on-chain interactions >
FCL JS comes with TypeScript support. If you need to use specific types, you can import them directly from the @onflow/fcl package.
import {CurrentUser} from "@onflow/fcl"
const newUser: CurrentUser = {
addr: null,
cid: null,
expiresAt: null,
f_type: 'User',
f_vsn: '1.0.0',
loggedIn: null,
services: []
}
For all type definitions available, see this file
Wallet providers on Flow have the flexibility to build their user interactions and UI through a variety of ways:
FCL is agnostic to the communication channel and be configured to create both custodial and non-custodial wallets. This enables users to interact with wallet providers without needing to download an app or extension.
The communication channels involve responding to a set of pre-defined FCL messages to deliver the requested information to the dapp. Implementing a FCL compatible wallet on Flow is as simple as filling in the responses with the appropriate data when FCL requests them. If using any of the front-channel communication methods, FCL also provides a set of wallet utilities to simplify this process.
It can be difficult to get users to discover new wallets on a chain. To solve this, we created a wallet discovery service that can be configured and accessed through FCL to display all available Flow wallet providers to the user. This means:
The discovery feature can be used via API allowing you to customize your own UI or you can use the default UI without any additional configuration.
Note: To get your wallet added to the discovery service, make a PR in fcl-discovery.
If you prefer to interact with Flow at a lower level without using FCL, you can use the Flow JavaScript SDK directly. The SDK provides raw access to Flow's API for sending transactions, executing scripts, and managing accounts.
FCL is built on top of the Flow SDK, making it easier to handle authentication, wallet interactions, and dapp connectivity. Choose the approach that best fits your use case.
FAQs
High-level JavaScript/TypeScript library for building web applications on the Flow blockchain.
We found that @onflow/fcl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socketβs new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.