
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@ophirai/mcp-server
Advanced tools
MCP tool server exposing Ophir agent negotiation as Model Context Protocol tools for LLM-powered agents
MCP server that gives your AI agent the ability to discover, negotiate with, and manage AI service providers through the Ophir protocol.
No API keys required — connects to the public Ophir registry.
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"ophir": {
"command": "npx",
"args": ["@ophirai/mcp-server"]
}
}
}
Add to .cursor/mcp.json in your project root:
{
"ophir": {
"command": "npx",
"args": ["@ophirai/mcp-server"]
}
}
Add to your Windsurf MCP config:
{
"mcpServers": {
"ophir": {
"command": "npx",
"args": ["@ophirai/mcp-server"]
}
}
}
Add to your Cline MCP settings:
{
"mcpServers": {
"ophir": {
"command": "npx",
"args": ["@ophirai/mcp-server"]
}
}
}
npx @ophirai/mcp-server
smithery install ophir-negotiate
| Environment Variable | Description | Default |
|---|---|---|
OPHIR_REGISTRY_URL | Ophir registry endpoint | https://registry.ophir.ai/v1 |
OPHIR_SELLERS | Comma-separated seller endpoints | Auto-discovered |
OPHIR_BUYER_ENDPOINT | Local buyer agent endpoint | http://localhost:3001 |
"Find me inference providers with a reputation score above 80."
Returns a list of providers with their services, pricing, and reputation scores:
{
"providers": [
{
"agent_id": "provider-abc",
"endpoint": "https://provider-abc.ophir.ai",
"services": [{ "category": "inference", "base_price": "0.002", "currency": "USDC", "unit": "request" }],
"reputation": { "score": 92, "total_agreements": 1847 }
}
],
"total": 3
}
"Negotiate inference service with a max budget of 0.005 USDC per request."
Sends an RFQ to all matching providers, collects quotes, ranks them, and returns the best option:
{
"best_quote": {
"seller": "provider-abc",
"price": "0.0018",
"currency": "USDC",
"unit": "request",
"sla": [
{ "metric": "latency_p99", "target": "500ms" },
{ "metric": "uptime", "target": "99.9%" }
]
},
"total_quotes": 5,
"rfq_id": "rfq_01HXYZ..."
}
"Accept quote qt_abc123 from RFQ rfq_01HXYZ."
Creates a signed agreement with the selected provider, locking in the negotiated terms.
"Check if agreement agr_xyz is meeting its SLA targets."
Returns current SLA metric observations and compliance status:
{
"agreement_id": "agr_xyz",
"sla_metrics": [
{ "name": "latency_p99", "target": "500ms", "comparison": "lte" },
{ "name": "uptime", "target": "99.9%", "comparison": "gte" }
],
"compliance_status": "monitoring_available"
}
"Show me all my active provider agreements."
Lists all agreements with their pricing, status, and SLA terms.
"File a dispute against agreement agr_xyz for latency violations."
Submits a dispute with cryptographic evidence of SLA violations, triggering the protocol's dispute resolution process.
MIT
FAQs
MCP tool server exposing Ophir agent negotiation as Model Context Protocol tools for LLM-powered agents
We found that @ophirai/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.