
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@stophy/mcp
Advanced tools
Live web data as typed JSON for AI agents. Search, video, social, jobs, places, shopping, apps, property and ads behind one key, with a price shown before every call. You pay only for answers that come back. Your agent reaches every Stophy endpoint through three MCP tools.
Most apps can connect to the hosted server directly. There is nothing to install.
| URL | How you connect | What your agent can use |
|---|---|---|
https://api.stophy.dev/mcp | No key | Google search, Google News, YouTube search, YouTube video details, YouTube transcripts, Reddit search and Google Maps places, within a free allowance |
https://api.stophy.dev/mcp | Authorization: Bearer <key> header | Every endpoint |
https://mcp.stophy.dev/mcp | Sign in with your browser | Every endpoint |
Get an API key at stophy.dev/signup.
In Claude on the web, Desktop or mobile, open Customize > Connectors, choose Add custom connector, and paste https://mcp.stophy.dev/mcp. Sign in when Claude asks.
To sign in with your browser, add the server, then run /mcp and choose Authenticate:
claude mcp add --transport http stophy https://mcp.stophy.dev/mcp
To use an API key:
claude mcp add --transport http stophy https://api.stophy.dev/mcp --header "Authorization: Bearer <key>"
To start without a key:
claude mcp add --transport http stophy https://api.stophy.dev/mcp
To use the key in your STOPHY_API_KEY environment variable:
codex mcp add stophy --url https://api.stophy.dev/mcp --bearer-token-env-var STOPHY_API_KEY
To sign in with your browser instead, add the sign-in URL, then log in:
codex mcp add stophy --url https://mcp.stophy.dev/mcp
codex mcp login stophy
Use the Add to Cursor button above to sign in with your browser, or add this to .cursor/mcp.json to use a key:
{
"mcpServers": {
"stophy": {
"url": "https://api.stophy.dev/mcp",
"headers": { "Authorization": "Bearer <key>" }
}
}
}
To start without a key, leave out headers.
Some apps can only start a local MCP server. For those, use this package. It runs on your computer and passes every request to the hosted server, so it always has the same tools.
npx -y @stophy/mcp
With STOPHY_API_KEY set, your agent can use every endpoint. Without it, your agent can use Google search, Google News, YouTube search, YouTube video details, YouTube transcripts, Reddit search and Google Maps places.
Add this to claude_desktop_config.json, then restart Claude Desktop:
{
"mcpServers": {
"stophy": {
"command": "npx",
"args": ["-y", "@stophy/mcp"],
"env": { "STOPHY_API_KEY": "<key>" }
}
}
}
To start without a key, leave out env.
The package needs Node.js 18 or later.
| Variable | What it does |
|---|---|
STOPHY_API_KEY | Your Stophy API key. Optional. |
STOPHY_MCP_URL | The server to connect to. The default is https://api.stophy.dev/mcp. |
| Tool | What it does |
|---|---|
stophy_search_endpoints | Finds the endpoint for a task, with its cost |
stophy_describe_endpoint | Shows the input an endpoint takes and what it returns |
stophy_call | Runs an endpoint with id, input and optional fields, and returns JSON |
Your agent usually searches, then describes, then calls. Endpoint ids are camelCase, such as googleSearch or youtubeSearch. Lists come back as results, and fields keeps only the keys you name on each row. Each result says how many credits it used.
One call returns one page from the site at the price shown for that endpoint. Some list endpoints take page and return page and hasMore: ask for the next number while hasMore is true. Others return a cursor when there is more: pass it back unchanged as cursor to get the next page.
MIT
FAQs
One API for live, structured web data. REST, MCP, SDK and CLI.
The npm package @stophy/mcp receives a total of 1,387 weekly downloads. As such, @stophy/mcp popularity was classified as popular.
We found that @stophy/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.