
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@silvanexum/mcp
Advanced tools
Model Context Protocol server for Silvanexum — the spend-control plane for AI agents. Discover, run, and inspect agents with signed, credit-metered runs and live org spend, from any MCP host. Run with `npx -y @silvanexum/mcp`.
The official Model Context Protocol server for Silvanexum — the spend-control plane for AI agents. Discover, run, and inspect agents — with signed, replayable, credit-metered runs and live org spend — natively from Claude Desktop, Claude Code, Cursor, Windsurf, or any MCP host.
Every
run_agentreturns a signed, replayable run metered in credits — andget_spending/list_budgets/create_budgetbring cost attribution and spend caps right into the host. The SDK and dashboard cover the full surface (gateway capture, trends, mesh traces).
npx -y @silvanexum/mcp
Set a scoped API key in the environment first (create one in the dashboard under
Settings → API keys — grant read+run, never pay):
export SILVANEXUM_API_KEY="sx_live_..."
{
"mcpServers": {
"silvanexum": {
"command": "npx",
"args": ["-y", "@silvanexum/mcp"],
"env": { "SILVANEXUM_API_KEY": "sx_live_..." }
}
}
}
Python users can run the same server via silvanexum-mcp: uvx silvanexum-mcp.
Two ways:
.vscode/mcp.json:{
"servers": {
"silvanexum": {
"command": "npx",
"args": ["-y", "@silvanexum/mcp"],
"env": { "SILVANEXUM_API_KEY": "${input:silvanexum_key}" }
}
},
"inputs": [
{ "id": "silvanexum_key", "type": "promptString", "description": "Silvanexum API key", "password": true }
]
}
This server also ships a server.json for the MCP Registry.
| Tool | What it does | Scope |
|---|---|---|
search_agents | Proof-ranked marketplace search (outcomes, not stars) | read |
get_agent | Fetch an agent's config + reputation | read |
get_reputation | Volume-aware trust score + confidence | read |
run_agent | Run an agent → answer + signed, replayable trace URL | run |
get_run | Fetch a run's full signed trace | read |
deploy_template | Deploy a 1-click vertical template (M11, may be planned) | manage |
wallet_balance | Org credit balance | read |
get_spending | Cost attribution — spend by agent / project / model / provider | read |
list_budgets | Spend caps with live spend + state (ok / warn / exceeded) | read |
create_budget | Create a spend cap; block rejects a breaching run (HTTP 402) | manage |
| Env var | Purpose |
|---|---|
SILVANEXUM_API_KEY | Required. Scoped key (read+run recommended). |
SILVANEXUM_BASE_URL | API base (default https://api.silvanexum.com). |
SILVANEXUM_WEB_URL | Web base for replay URLs (default https://silvanexum.com). |
A tool that needs a scope your key lacks fails with a clear insufficient_scope
error — by design. Licensed Apache-2.0.
FAQs
Model Context Protocol server for Silvanexum — the spend-control plane for AI agents. Discover, run, and inspect agents with signed, credit-metered runs and live org spend, from any MCP host. Run with `npx -y @silvanexum/mcp`.
The npm package @silvanexum/mcp receives a total of 24 weekly downloads. As such, @silvanexum/mcp popularity was classified as not popular.
We found that @silvanexum/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.