
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
Infrastructure tools for agent commerce, monetized MCP workflows, and programmable AI execution.
Infrastructure for monetized agent ecosystems.
ForgeMesh is a set of composable tools for building AI agents and workflows that earn revenue — through programmable micropayments, affiliate attribution, and paid API access.
Each package is independently installable. They work together but do not require each other.
| Package | Purpose | Install |
|---|---|---|
| affiliate-router-mcp | Vendor-neutral monetization routing for agent tools | npm i affiliate-router-mcp |
| coinopai-mcp | Paid crypto intelligence via x402 micropayments | npm i coinopai-mcp |
| coinopai-imagegen | Paid image generation service on Base | (backend service) |
┌─────────────────────────────────────────────────┐
│ AI Agent / Orchestrator │
└──────────────┬──────────────────┬───────────────┘
│ │
MCP (stdio) MCP (stdio)
│ │
▼ ▼
┌──────────────────────┐ ┌──────────────────────┐
│ coinopai-mcp │ │ affiliate-router-mcp │
│ 9 paid tools │ │ 8 routing tools │
│ x402 + Pyrimid │ │ 3 adapters │
└──────────┬───────────┘ └──────────┬───────────┘
│ │
▼ ▼
┌──────────────────────────────────────────────────┐
│ Paid API Endpoints │
│ x402.coinopai.com · imagegen.coinopai.com │
└──────────────────────┬───────────────────────────┘
│
▼
┌──────────────────────────────────────────────────┐
│ On-Chain Settlement (Base) │
│ USDC · EIP-3009 · Pyrimid affiliate splits │
└──────────────────────────────────────────────────┘
Each package is an MCP server. Agents connect via stdio and call tools like any other MCP integration. No SDK lock-in — works with Claude Code, Claude Desktop, or any MCP-compatible client.
Agents pay per call using x402 — the HTTP 402 micropayment protocol. The agent's wallet signs a USDC payment on Base, the facilitator validates it on-chain, and the endpoint returns data. No API keys. No subscriptions. Pay-per-use.
affiliate-router-mcp abstracts payment and attribution into pluggable adapters:
| Adapter | How it works | Status |
|---|---|---|
x402_pyrimid | On-chain USDC split via Pyrimid affiliate network | Tested |
x402_direct | Standard EIP-3009 payment via Coinbase facilitator | Implemented |
referral_link | URL parameter injection for traditional affiliate programs | Implemented |
Pyrimid/x402 is the first tested adapter. The architecture is open for any affiliate or agent-commerce rail.
Agent calls tool → HTTP 402 → wallet signs USDC payment → retry with payment header → data returned
With affiliate attribution:
Agent calls tool with affiliate_id
→ USDC.approve(PyrimidRouter)
→ routePayment splits: vendor 79.2% · affiliate 19.8% · protocol 1%
→ retry with tx hash → data returned
The buyer always pays the listed price. The split comes from the vendor's portion.
Not a framework. Not a protocol. Not a token.
A set of infrastructure packages for building agents that transact.
MIT — CoinOpAI
FAQs
Infrastructure tools for agent commerce, monetized MCP workflows, and programmable AI execution.
The npm package forgemesh receives a total of 1 weekly downloads. As such, forgemesh popularity was classified as not popular.
We found that forgemesh demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.