
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@umengfe/mcp-server-umeng-openapi
Advanced tools
友盟MCP (Model Context Protocol) API的Node.js客户端库,提供了一系列友盟统计数据API的封装。
npm install @umengfe/mcp-server-umeng-openapi
在cursor的mcp.json文件中添加以下内容:
{
"mcpServers": {
"umeng-openapi": {
"command": "npx",
"args": [
"-y",
"@umengfe/mcp-server-umeng-openapi"
],
"env": {
"UMENG_API_KEY": "xxx",
"UMENG_API_SECRET": "xxx"
}
}
}
}
在window上,需要添加单独的配置
{
"mcpServers": {
"umeng-openapi": {
"command": "cmd",
"args": [
"/c",
"npx",
"-y",
"@umengfe/mcp-server-umeng-openapi"
],
"env": {
"UMENG_API_KEY": "xxx",
"UMENG_API_SECRET": "xxx"
}
}
}
}
该库提供了一个签名辅助工具,输入API密钥和API安全密钥,填写函数和参数,生成签名后的请求URL。
import UmengOpenAPI from '@umengfe/mcp-server-umeng-openapi/dist/src/umopenapi.js';
const client = new UmengOpenAPI('your_api_key','your_api_security');
const signedUrl = client.generateSignedUrl('param2/1/com.umeng.uapp/umeng.uapp.getAllAppData', {a:1,b:2});
fetch(signedUrl).then(res => res.json()).then(data => console.log(data));
获取所有应用的统计数据。
// 返回数据示例(数字仅供参考)
{
"allAppData": [
{
"yesterdayNewUsers": 1234, // 昨日新增用户
"yesterdayUniqNewUsers": 1234, // 昨日独立新增用户
"todayLaunches": 5000, // 今日启动次数
"totalUsers": 100000, // 总用户数
"todayNewUsers": 500, // 今日新增用户
"yesterdayUniqActiveUsers": 2000, // 昨日独立活跃用户
"todayActivityUsers": 1500, // 今日活跃用户
"yesterdayLaunches": 4800, // 昨日启动次数
"yesterdayActivityUsers": 2100 // 昨日活跃用户
}
]
}
MIT
UMENG_API_KEY 和 UMENG_API_SECRET?
请访问友盟开发者平台的开放API状态页面以获取相关信息。FAQs
MCP server for using the Umeng OpenAPI
We found that @umengfe/mcp-server-umeng-openapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.