
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@tensorfeed/mcp-server
Advanced tools
MCP server for TensorFeed.ai - AI news, status, model data, and premium endpoints (routing, cost projection, forecast, history series, news search, webhook watches with digest tier, enriched directory) for AI agents
The MCP server has its own repo: https://github.com/RipperMercs/tensorfeed-mcp
User-facing docs, install instructions, and the full tool reference live there. Star and watch that repo to follow MCP server updates.
This subfolder remains in the main tensorfeed repo as the publishing source for the npm package (@tensorfeed/mcp-server) and the official MCP registry entry. Edits to src/, server.json, package.json, etc. happen here and get pushed to the standalone repo on release.
The single best model to use right now, as one signed call. route_verdict fuses live pricing, contamination-discounted benchmark capability, real production usage, measured p95 latency probes, live incident state, and deprecation flags into one ranked decision, with an AFTA-signed receipt over the exact inputs. Instead of stitching together pricing pages, benchmark leaderboards, status dashboards, and your own latency tests, you get a current, defensible routing answer in one request.
curl -s -A "tensorfeed-cc-quickstart" "https://tensorfeed.ai/api/preview/route-verdict?task=code"
Swap task for reasoning, creative, or general, or pass ?model=<id-or-name> to score a specific model. The free preview is 10 calls per day per IP, no token. Abridged real response:
{
"ok": true,
"preview": true,
"query": { "task": "code", "model": null },
"verdict": {
"rank": 1,
"model": { "name": "Gemini 2.5 Pro", "provider": "google" },
"pricing": { "blended": 5.625, "unit": "per 1M tokens" },
"quality": { "trust_discounted": 0.6498 },
"latency": { "measured_p95_ms": 1223, "source": "measured_probe" },
"operational": { "ok": true, "status": "operational" },
"composite_score": 0.8449,
"why": "code quality 0.6498 after trust discount; corroborated by real usage (rank 5, 6.5% share, flat); measured p95 1223 ms; operational; blended $5.625 / 1M"
},
"rate_limit": { "limit": 10, "remaining": 9, "scope": "per IP per UTC day" },
"upgrade": {
"premium_endpoint": "/api/premium/route-verdict",
"adds": ["runners_up", "AFTA-signed receipt", "filter params", "no rate limit"]
}
}
With @tensorfeed/mcp-server installed, an agent gets two tools. Call the free one for the pick, then the paid one when it needs to defend the choice:
# Free taste: the top pick + reasoning, no token (10/IP/day)
route_verdict_preview({ task: "code" })
# 1 credit: ranked runners-up, constraint filters, AFTA-signed receipt
route_verdict({ task: "code", max_latency_p95_ms: 1500, budget: 8, min_quality: 0.6 })
route_verdict adds the ranked runners-up, the constraint filters (max_latency_p95_ms, budget, min_quality, require_operational, exclude_deprecated), and the AFTA-signed receipt the agent can audit later. Credits come from tensorfeed.ai/developers/agent-payments.
Models, prices, and latency move week to week. route_verdict is one signed call an agent can act on now and later prove why it routed the way it did, without rebuilding the comparison from scratch each time.
From the main tensorfeed repo:
# 1. Bump the version in mcp-server/package.json + mcp-server/server.json
# 2. Build + npm publish from the mcp-server/ folder
cd mcp-server
npm run build
npm publish --access public
# 3. Republish to the official MCP registry. The script lives at
# repo-root/scripts/, not mcp-server/scripts/, so step back up first.
cd ..
.\scripts\mcp-publish.ps1
# 4. Mirror to the standalone repo - automated. The
# .github/workflows/mirror-mcp-server.yml workflow runs on every
# push to main that touches mcp-server/. To trigger a manual sync,
# go to the Actions tab and run "Mirror MCP server to standalone
# repo" via workflow_dispatch.
The mirror workflow needs a personal access token with contents: write
permission on RipperMercs/tensorfeed-mcp. Set it once:
Contents: Read and write and Metadata: Read-only.STANDALONE_REPO_TOKEN (Settings -> Secrets and variables -> Actions).mcp-server/**, or via the manual "Run workflow" button.FAQs
MCP server for TensorFeed.ai - AI news, service status, model pricing, signed decision verdicts, time series, model comparison, webhook watches, and a discovery tool for the full TensorFeed data catalog, for AI agents
We found that @tensorfeed/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.