
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
@triplewhale/mcp-server-triplewhale
Advanced tools
Model Context Protocol (MCP) is a new, standardized protocol for managing context between large language models (LLMs) and external systems. In this repository, we provide an installer as well as an MCP Server for Triplewhale.
This lets you use Claude Desktop, or any MCP Client, to use natural language to accomplish things with Triplewhale, e.g.:
Was my net profit positive last month?.Rank countries by order revenue and new users for the last quarter..Give me ads ROAS over the last 7 days and break it out by attribution model?To install Triplewhale MCP Server for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install triplewhale --client claude
npx -y @triplewhale/mcp-server-triplewhale init $TRIPLEWHALE_API_KEYwhat's my meta spend in the last 7 days?mobynpm install
npm run build
npm run watch # You can keep this open.
node dist/index.js init $TRIPLEWHALE_API_KEY
Then, restart Claude each time you want to test changes.
To run the tests you need to setup the .env file according to the .env.example file.
npm run test
FAQs
MCP server for interacting with Triplewhale API
We found that @triplewhale/mcp-server-triplewhale demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.