
Research
/Security News
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.
@tengence/geo-mcp
Advanced tools
GEO content engine MCP server: 56 tools across content, publishing, search-inclusion and AI-monitoring domains; stdio + Streamable HTTP transports, Bearer-token auth (the MCP bridge layer of @tengence/geo-sdk)
GEO 内容引擎的 MCP 服务:56 个工具,覆盖内容生产、发布、搜索引擎收录提交、AI 可见性监测与多平台分发。支持 stdio(本地客户端)与 Streamable HTTP(远程/自托管)两种传输。
这是 @tengence/geo-sdk 的 MCP 桥接层;底层存储默认使用 Node 22.5+ 内置的 node:sqlite(零原生依赖),旧版 Node 或禁用内置模块时回退到可选的 better-sqlite3。
命名空间:
com.tengence/geo· 官方 Registry:registry.modelcontextprotocol.io
node:sqlite 驱动,零原生编译;推荐 24 LTS)。数据库默认走内置驱动,安装体积小、跨平台无编译风险。npm i better-sqlite3 —— 旧版 Node 回退驱动,或需要更完整 SQLite API(事务封装等)时的选择;npm i sharp —— 启用图片压缩/缩放等处理能力(未安装时相关工具会给出明确提示)。npx -y -p @tengence/geo-mcp tengence-geo-mcp # stdio 模式,无需本地仓库
本包含两个入口(stdio 与 HTTP),因此需用
-p指定包名 + 完整 bin 名;HTTP 版为tengence-geo-mcp-http。
{
"mcpServers": {
"tengence-geo": {
"command": "npx",
"args": ["-y", "-p", "@tengence/geo-mcp", "tengence-geo-mcp"]
// 可选环境变量:
// "env": { "SITES_ROOT": "~/tengence/sites", "DB_DRIVER": "sqlite" }
}
}
}
工作台目录在运行时由客户端决定(通过 workspace_use 工具),内部数据落在 ~/.tengence/geo-mcp。无需设置 SITES_ROOT / DB_PATH / APP_ID 即可启动。
GEO_MCP_PORT=8787 GEO_MCP_TOKEN=sk-xxx SITES_ROOT=~/tengence/sites \
npx -y @tengence/geo-mcp-http
# Base URL = http://127.0.0.1:8787/ Auth = Bearer <GEO_MCP_TOKEN>
远程模式目前仅有静态 Bearer 鉴权(无 OAuth 2.1 / 动态客户端注册),适用于单用户自托管;多租户公开托管需待授权层补齐。
| 变量 | 说明 | 必填 | 默认 |
|---|---|---|---|
SITES_ROOT | 各站点配置 / .env 的根目录 | 否 | — |
TENGENCE_GEO_HOME | 内部运行时数据目录 | 否 | ~/.tengence/geo-mcp |
DB_DRIVER | sqlite(默认)| mysql | 否 | sqlite |
DB_PATH | SQLite 文件路径(~ 展开) | 否 | $TENGENCE_GEO_HOME/geo.sqlite |
GEO_SQLITE_DRIVER | builtin|native 显式选择 SQLite 驱动(测试/排错用) | 否 | 自动(优先 builtin) |
GEO_MCP_PORT | HTTP 模式监听端口 | 否 | 8787 |
GEO_MCP_TOKEN | HTTP 模式 Bearer 令牌;未设置则无鉴权(仅本地调试) | 否 | 空 |
node:sqlite,npx 安装体积最小、无原生编译。npm i better-sqlite3(可选依赖,已随包声明)。sharp:未安装时调用图片命令会给出明确的安装提示,不影响其余工具。DB_DRIVER=mysql 并提供 MYSQL_* 连接变量。内容(ingest/draft/check/publish/standards/plan)、WordPress 发布、搜索引擎收录(GSC/Bing/IndexNow/Baidu)、AI 监测、微信/掘金/Dev.to 等分发、站点诊断与图片采集。完整清单以 tools/registry.js 导出为准。
MIT © Tengence Team
FAQs
GEO content engine MCP server: 56 tools across content, publishing, search-inclusion and AI-monitoring domains; stdio + Streamable HTTP transports, Bearer-token auth (the MCP bridge layer of @tengence/geo-sdk)
We found that @tengence/geo-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.