
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
A Model Context Protocol (MCP) server that connects AI clients (Claude Desktop, Cursor, Windsurf) to the Chirak Sales, Inventory, and Order Management API.
The Chirak MCP server enables Large Language Model (LLM) interfaces to perform real-time inventory lookups, record sales transactions, manage product records, and query business analytics via standard Model Context Protocol tooling over STDIO.
To install Chirak for Claude Desktop automatically using Smithery:
npx -y smithery mcp add ufhouck/chirak
Add the following configuration to your claude_desktop_config.json:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"chirak": {
"command": "npx",
"args": ["-y", "chirak-mcp"],
"env": {
"CHIRAK_API_KEY": "your_api_key_here"
}
}
}
}
Configure the MCP server within your editor's MCP settings:
npx-y chirak-mcpCHIRAK_API_KEY: your_api_key_hereTo install via Smithery CLI:
npx -y smithery mcp add ufhouck/chirak
| Variable | Required | Description |
|---|---|---|
CHIRAK_API_KEY | Yes | Authentication key for Chirak Cloud API (chk_live_...). |
CHIRAK_API_BASE_URL | No | Target API endpoint (default: https://chirak.app/api/v1). |
| Tool | Description |
|---|---|
get_products | List and search inventory items with optional filters by category, stock level, or query string. |
add_product | Create a new product entry with SKU, name, prices, barcode, and initial stock. |
update_stock | Adjust inventory counts with specified movement type (inbound, outbound, audit, loss). |
update_product | Modify existing product attributes such as title, price, or category. |
delete_product | Remove an inventory item record. |
| Tool | Description |
|---|---|
get_sales | Retrieve recent orders and sales records filtered by date or status. |
record_sale | Create a sales transaction with line items, applied payment methods, and customer association. |
cancel_sale | Void a sales transaction and automatically return items to inventory. |
get_daily_summary | Retrieve daily aggregated metrics including total revenue, profit, transaction count, and top-selling products. |
| Tool | Description |
|---|---|
get_customers | Query customer records, outstanding balances, and purchase summaries. |
add_customer | Create a new customer profile. |
update_customer | Update contact information and customer notes. |
delete_customer | Remove a customer record. |
Clone the repository and install dependencies:
git clone https://github.com/ufhouck/chirak-mcp.git
cd chirak-mcp
npm install
npm run build
To run locally using STDIO:
export CHIRAK_API_KEY="your_api_key_here"
node dist/index.js
Chirak values developer and user privacy. When interacting with this MCP server:
MIT License. See LICENSE for details.
FAQs
Model Context Protocol (MCP) Server for Chirak Sales & Inventory Assistant
The npm package chirak-mcp receives a total of 661 weekly downloads. As such, chirak-mcp popularity was classified as not popular.
We found that chirak-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.