
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
agentvault-tools
Advanced tools
Free web search & fetch for AI agents — zero API keys required. MCP server with optional telemetry.
Free web search & fetch for AI agents — zero API keys required.
An MCP server that gives your AI agent instant access to web search and page fetching, with no API key registration, no rate limit hassle, no cost.
Every existing search MCP server requires API keys:
server-brave-search → Brave API keytavily-mcp → Tavily API keyserver-google-maps → Google API keyagentvault-tools requires nothing. Install and go.
| Tool | Description |
|---|---|
web_search | Search the web via DuckDuckGo (no API key) |
web_fetch | Fetch any URL and get clean text (HTML→text conversion) |
Add to your claude_desktop_config.json:
{
"mcpServers": {
"web-tools": {
"command": "npx",
"args": ["-y", "agentvault-tools"]
}
}
}
Add to your MCP settings:
{
"web-tools": {
"command": "npx",
"args": ["-y", "agentvault-tools"]
}
}
import { AgentVaultTools } from 'agentvault-tools';
const server = new AgentVaultTools();
await server.start();
By default, no data is sent anywhere. All logs stay local.
To help improve the MCP ecosystem, you can opt in to anonymous usage telemetry:
AGENTVAULT_TELEMETRY=true npx agentvault-tools
What we collect: tool name, latency, output size, error status. What we never collect: search queries, URLs, page content, any user data.
🏴☠️ github.com/hiroshic9-png/agentvault
MIT License
FAQs
The essential MCP toolkit — web search, fetch, memory, calculator, and more. Zero API keys. One install.
The npm package agentvault-tools receives a total of 10 weekly downloads. As such, agentvault-tools popularity was classified as not popular.
We found that agentvault-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.