
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@sgpdirectory/mcp
Advanced tools
Singapore business directory. Search companies, UENs, and SSIC industry classifications.
Official local MCP (Model Context Protocol) package for the SGP Directory remote server. Singapore business directory: search companies, UENs, and SSIC industry classifications.
This package provides a standard stdio interface compatible with local MCP clients (like Claude Desktop and Cursor), proxying requests securely to the remote HTTP streamable SGP Directory server (https://mcp.sgpdirectory.com/mcp).
Run the following package directly using npx:
When configuring Cursor, set the MCP "Type" to command and use:
npx -y @sgpdirectory/mcp
Add this to your mcp-servers.json configuration file:
{
"mcpServers": {
"sgp-directory": {
"command": "npx",
"args": ["-y", "@sgpdirectory/mcp"]
}
}
}
If your proxy is behind an access token, you can pass it via SGP_DIRECTORY_API_KEY environment variable. The wrapper will automatically format it as an Authorization: Bearer <TOKEN> header and attach it to the mcp-remote connection.
{
"mcpServers": {
"sgp-directory": {
"command": "npx",
"args": ["-y", "@sgpdirectory/mcp"],
"env": {
"SGP_DIRECTORY_API_KEY": "your-secret-token"
}
}
}
}
Login to NPM
Run the login command and follow the prompts. You need to be a part of the @sgpdirectory org.
npm login
Publish the package Run the following inside your wrapper directory:
npm publish --access public
If you have cloned the repository locally, you can run:
npm install
npm start
This will launch the proxy and wait for standard stdio JSON-RPC messages.
FAQs
Singapore business directory. Search companies, UENs, and SSIC industry classifications.
The npm package @sgpdirectory/mcp receives a total of 102 weekly downloads. As such, @sgpdirectory/mcp popularity was classified as not popular.
We found that @sgpdirectory/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.