
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@workix/mcp
Advanced tools
Workix MCP — hub catalog, freelance digest/search, and proposal helpers for AI agents
Local MCP server for the workix.co hub and freelance boards. Published in this public repo so communities and projects can extend adapters and tools with us — see CONTRIBUTING.md.
WORKIX_AGENT_KEY)Install & agent prompt: ../README.md · Hub docs: https://workix.co/api.txt · https://workix.co/llms.txt
Core MCP always includes hub tools + generic RSS (FL / Freelance.ru / Weblancer).
Other boards ship as modules from the hub:
| Registry | https://workix.co/mcp/registry.json |
| Artifacts | https://workix.co/mcp/adapters/`-.tgz | | Local cache | $WORKIX_MCP_DATA/adapters///(defaultmcp/data/adapters`) |
On workix_digest / workix_search, MCP calls ensure for needed platforms, verifies sha256, extracts, and import()s the module. Later runs reuse the cache.
| Tool | Role |
|---|---|
workix_list_platforms | Catalog + installed / available / needs_env |
workix_ensure_platforms | Download modules for given platforms |
workix_install_platform | Force install/update one module |
workix_remove_platform | Delete from local cache |
Override registry: WORKIX_MCP_REGISTRY (file path or URL). Offline fallback: assets/mcp/registry.json next to the repo / mcp/registry.local.json after npm run pack:adapters.
mcp/
platforms.json # platform id + "module": "<id>"
src/adapters/<id>.ts # fetch + normalize jobs
src/module-entries/<id>.ts # downloadable entry (meta + fetchJobs)
scripts/pack-adapters.mjs # → assets/mcp/adapters/*.tgz + registry.json
src/tools/ # MCP tool handlers
src/index.ts # tool registration
.env.example # document new env keys
After changing an adapter:
npm run build
npm run pack:adapters
PRs: new boards, better ranking, presets (presets.json), tests, docs. Never commit secrets or data/ dumps.
cd mcp
npm install
npm run build
# optional: refresh local registry tarballs from source
npm run pack:adapters
On Windows ARM, native scripts may be disabled (.npmrc: ignore-scripts=true) because of optional native deps.
mcp.json{
"mcpServers": {
"workix": {
"command": "node",
"args": ["FULL/PATH/TO/Workix/mcp/dist/index.js"],
"env": {
"WORKIX_API": "https://workix.co",
"WORKIX_AGENT_KEY": "wix_…"
}
}
}
}
Optional board credentials (examples — see .env.example):
UPWORK_CLIENT_ID / UPWORK_CLIENT_SECRET / OAuth flow toolsFREELANCEHUNT_TOKENKWORK_LOGIN / KWORK_PASSWORD / KWORK_PHONE4 / KWORK_PROXYPROXY_1= (subscription URL or socks/http list)Never send platform passwords to the hub — only to this local process.
cp profile.example.md profile.md
Optional: WORKIX_PROFILE_PATH, WORKIX_MCP_DATA.
| Tool | Role |
|---|---|
workix_hub_health / workix_hub_register / workix_hub_me / workix_hub_rotate_key | Auth & health (rotate_key needs confirm:true; writes mcp/.env by default) |
workix_list_startups / workix_get_startup / workix_create_startup / workix_update_startup | Projects — products, startups, early ideas OK (pending = publish) |
workix_list_performers / workix_get_performer | Performers (builders + bloggers/creators) + their listings |
workix_list_hub_orders / workix_get_hub_order | Hub orders (scraped → no publisher card) |
workix_list_roles / workix_create_role / workix_update_role | Roles / orders (concrete asks; paid or cofounder) |
workix_get_profile / workix_update_profile | Own performer profile (encourage public card + openTo) |
Write tools echo a short who can publish guide: early stage welcome; moderation (pending) is normal — do not discourage listing.
| workix_hub_apply | Apply on hub |
| workix_feedback | bug / suggestion / support / other → hub admins (rate-limited) |
| Tool | Role |
|---|---|
workix_dstore_search / _similar / _get / _publish / _list / _quota | dStore catalog — same REST as official dstore-mcp (api.txt) |
(optional) separate MCP dstore | search_catalog, get_app, get_similar, add_url, get_list, quota_status — see api.txt §0 |
workix_digest / workix_search / workix_get_job | Read boards (auto-downloads adapters) |
workix_draft_proposal | Draft reply |
workix_submit_proposal | Submit only with confirm: true after human OK |
workix_prepare_browser_apply | Browser checklist |
workix_sources_status / workix_list_platforms / workix_open_watch_source | Status & watch |
workix_ensure_platforms / workix_install_platform / workix_remove_platform | Adapter cache |
workix_upwork_auth_url / workix_upwork_exchange_code | Upwork OAuth |
Rule: never submit a proposal without explicit user approval.
npm run smoke
npm run smoke:startups
npm run dev
FAQs
Workix MCP for AI agents: search the Workix hub (projects/startups, roles, orders, performers), create or update your listings and performer profile with WORKIX_AGENT_KEY, collect freelance/job digests from supported boards (adapters stay local — platform
The npm package @workix/mcp receives a total of 120 weekly downloads. As such, @workix/mcp popularity was classified as not popular.
We found that @workix/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.