
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
easytable-mcp
Advanced tools
easyTable MCP server for Claude — developed and maintained by AI (Claude Code)
An MCP server for easyTable restaurant reservations. easyTable is a
restaurant table-booking system with a public per-restaurant widget at
https://book.easytable.com/book/?id=<restaurantId>.
Every request rides the user's own signed-in, Cloudflare-cleared
book.easytable.com browser tab via the
@fetchproxy/server bridge — the
site blocks server-side requests, and there is no login (the restaurant is
identified by its id).
This project was developed and is maintained by AI (Claude Code). Use at your own discretion.
| Tool | Kind |
|---|---|
easytable_list_types | read — bookable areas/types for a restaurant |
easytable_list_dates | read — bookable dates for an area + party size |
easytable_list_times | read — available time slots |
easytable_find_bookings | read — look up bookings by phone number |
easytable_create_booking | write (confirmed) — make a reservation |
easytable_modify_booking | write (confirmed) — change a reservation |
easytable_cancel_booking | write (confirmed) — cancel a reservation |
easytable_healthcheck | read — bridge connection status |
Every write asks you to confirm it first. A client that can show a
confirmation prompt (Claude Code) shows one. Elsewhere the first call makes no
network call and returns a preview plus a confirmToken; only a repeat call
with the same arguments and that token books, changes or cancels. The token is
single-use, and a changed argument invalidates it.
| variable | default | |
|---|---|---|
MCP_CONFIRM_MODE | ask-user | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). ask-user: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. auto: the same two steps, but the model may use the token after reviewing the preview itself. refuse: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt. An unrecognised value is treated as refuse. |
MCP_CONFIRM_TTL_SECONDS | 600 | How long a token stays valid. |
MCP_CONFIRM_SECRET | random per process | Signing key; set it only if tokens must survive a server restart. |
contextmint-bridge-chrome-*.zip asset and load it
unpacked (chrome://extensions → Developer mode → Load unpacked); in
Safari, it ships inside the ContextMint app, which has no public download
link yet, so use Chrome for now. ContextMint Bridge is the fetchproxy browser extension under its
new name, from the same maintainer — fetchproxy's own
README points to it.
Its source is public at
nullnet-app/contextmint-bridge:
build it yourself, or check a release zip against the .sha256 file
published beside it
(shasum -a 256 -c contextmint-bridge-chrome-<version>.zip.sha256).https://book.easytable.com/book/?id=<id>
and let it finish loading.create and modify additionally read the widget's Cloudflare Turnstile token
from the loaded confirm step, so a booking-widget tab must be open when you
confirm one.
npm install
npm run build
npm test
See docs/EASYTABLE-API.md for the reverse-engineered request/response shapes
and CLAUDE.md for architecture notes.
MIT
FAQs
easyTable MCP server for Claude — developed and maintained by AI (Claude Code)
The npm package easytable-mcp receives a total of 0 weekly downloads. As such, easytable-mcp popularity was classified as not popular.
We found that easytable-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.