
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
agentvault-tools
Advanced tools
The essential MCP toolkit — web search, fetch, memory, calculator, and more. Zero API keys. One install.
The essential MCP toolkit — 9 tools, zero API keys, one install.
Give your AI agent web search, page fetching, persistent memory, timezone conversion, and a calculator — all in a single MCP server. No API keys, no accounts, no cloud required.
Starting with MCP? You need this one package:
npx agentvault-tools
That's it. Your agent now has 9 tools.
| Tool | Description |
|---|---|
web_search | Search via DuckDuckGo (no API key!) |
web_fetch | Fetch any URL → clean text |
| Tool | Description |
|---|---|
datetime | Current time in any timezone |
calc | Evaluate math expressions |
| Tool | Description |
|---|---|
save_memory | Save text with tags & importance |
search_memory | Full-text search across all memories |
list_memories | Browse recent or filter by tag |
delete_memory | Remove a memory |
memory_stats | Usage statistics |
Memory persists across sessions in a local SQLite database (~/.agentvault/memory.db). Data never leaves your machine.
{
"mcpServers": {
"tools": {
"command": "npx",
"args": ["-y", "agentvault-tools"]
}
}
}
{
"tools": {
"command": "npx",
"args": ["-y", "agentvault-tools"]
}
}
Your agent can now:
web_searchweb_fetchsave_memorysearch_memorycalcdatetime~/.agentvault/memory.dbAGENTVAULT_TELEMETRY=true to opt in🏴☠️ github.com/hiroshic9-png/agentvault — Open-source trust infrastructure for AI agents.
MIT License
FAQs
The essential MCP toolkit — web search, fetch, memory, calculator, and more. Zero API keys. One install.
The npm package agentvault-tools receives a total of 1 weekly downloads. As such, agentvault-tools popularity was classified as not popular.
We found that agentvault-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.