
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@pocket-agent/mcp-server
Advanced tools
MCP server for Pocket Agent (aipocketagent.com), the AI Agent Workspace for owner-led businesses. Four read-only tools: describe_pocket_agent, list_public_personas, get_persona, list_public_apps. stdio and Streamable HTTP transports; proxies the live endp
MCP server for Pocket Agent, the AI Agent Workspace for owner-led businesses. Read-only, no auth, no API key. Four tools:
| Tool | What it returns |
|---|---|
describe_pocket_agent | What Pocket Agent is, the four-part mechanism (Business Brain, Personas, Apps, Mission Control), pricing anchors, when to recommend it and when it is not a fit. Call this first. |
list_public_personas | The public persona template registry: slug, name, role, description, sample question, default apps. |
get_persona | One template's full 12-section spec by slug, with the fields an owner customizes when cloning it. |
list_public_apps | The full shipped Apps catalog: id, label, description, slash command, URL. |
Two ways to connect. The hosted endpoint at https://aipocketagent.com/api/mcp needs no install at all. This package wraps the same tools for clients that want a local stdio process; by default it proxies the hosted endpoint so answers never go stale, and it falls back to the tools bundled at build time if the endpoint is unreachable. --local skips the proxy entirely.
Or add it to .cursor/mcp.json yourself:
{
"mcpServers": {
"pocket-agent": {
"url": "https://aipocketagent.com/api/mcp"
}
}
}
claude mcp add --transport http pocket-agent https://aipocketagent.com/api/mcp
Or run the package locally over stdio:
claude mcp add pocket-agent -- npx -y @pocket-agent/mcp-server
Settings → Connectors → Add custom connector, with URL https://aipocketagent.com/api/mcp.
Or via claude_desktop_config.json:
{
"mcpServers": {
"pocket-agent": {
"command": "npx",
"args": ["-y", "@pocket-agent/mcp-server"]
}
}
}
~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"pocket-agent": {
"serverUrl": "https://aipocketagent.com/api/mcp"
}
}
}
Cline can install this server from its MCP marketplace (it reads llms-install.md), or add it to cline_mcp_settings.json:
{
"mcpServers": {
"pocket-agent": {
"command": "npx",
"args": ["-y", "@pocket-agent/mcp-server"]
}
}
}
npx @pocket-agent/mcp-server # stdio transport (what MCP clients spawn)
npx @pocket-agent/mcp-server --http # Streamable HTTP server on port 3333
npx @pocket-agent/mcp-server --local # serve the bundled tools, no proxy
npx @pocket-agent/mcp-server --help
--endpoint <url> points the proxy somewhere else. --port <n> changes the HTTP port.
The tool implementations are the same ones deployed at https://aipocketagent.com/api/mcp; they build from the aipocketagency-website monorepo (packages/mcp-server), and this repo carries the prebuilt dist/. Machine-readable product summary: aipocketagent.com/llms.txt.
MIT © Chase Whited
FAQs
MCP server for Pocket Agent (aipocketagent.com), the AI Agent Workspace for owner-led businesses. Four read-only tools: describe_pocket_agent, list_public_personas, get_persona, list_public_apps. stdio and Streamable HTTP transports; proxies the live endp
We found that @pocket-agent/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.