
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
Exposes Ground Control's knowledge management as MCP tools for Claude and other AI agents.
| Tool | Description |
|---|---|
gctrl_extract | Extract knowledge from text → Neo4j entities + Qdrant vectors |
gctrl_query | Ask questions about knowledge graphs (hybrid RAG) |
gctrl_search_entities | Search for specific entities by name/type |
gctrl_list_graphs | List all knowledge graph compilations |
gctrl_fuse | Merge extraction jobs into unified graphs |
gctrl_list_ontologies | List available ontologies |
gctrl_list_extractions | List recent extraction jobs |
gctrl_store | Store knowledge (like Obsidian notes, but with KG extraction) |
gctrl_schema | Get the knowledge graph schema |
Every tool above is also exposed under its legacy name for backwards
compatibility with existing .mcp.json configs. The aliases log a
deprecation warning to stderr on every invocation and will be removed
in v2.0 — please migrate.
| Deprecated alias | Use instead |
|---|---|
borghive_extract | gctrl_extract |
borghive_query | gctrl_query |
borghive_store | gctrl_store |
borghive_fuse | gctrl_fuse |
borghive_search_entities | gctrl_search_entities |
borghive_list_graphs | gctrl_list_graphs |
borghive_list_ontologies | gctrl_list_ontologies |
borghive_list_extractions | gctrl_list_extractions |
borghive_schema | gctrl_schema |
Published on npm as gctrl-mcp and in the
official MCP Registry as io.github.gctrl-tech/gctrl. Add to your MCP client config
(Claude Code, Claude Desktop, Cursor, Codex, …):
{
"mcpServers": {
"gctrl": {
"command": "npx",
"args": ["-y", "gctrl-mcp"],
"env": {
"GCTRL_GATEWAY_URL": "http://localhost:4000/api/agent/mcp",
"GCTRL_API_TOKEN": "gctrl_..."
}
}
}
}
Requires a running GCTRL harness (get started).
| Env var | Purpose |
|---|---|
GCTRL_GATEWAY_URL | Recommended: URL of your harness's MCP gateway (http://<host>:4000/api/agent/mcp). The stdio server acts as a thin authenticated proxy. |
GCTRL_API_URL | Alternative direct mode: GCTRL API base URL (http://<host>:4000/api); tools run locally against the API. |
GCTRL_API_TOKEN | Scoped GCTRL Access Token (gctrl_…), created in Settings → Access Control with a clearance level + per-graph grants. Least privilege — the agent sees exactly what the token is cleared for. |
Dev-only fallback: GCTRL_EMAIL + GCTRL_PASSWORD (full-clearance JWT). Avoid in production.
cd borghive/services/mcp
npm install
npm run build
FAQs
GCTRL MCP Server — exposes KEX, FUSE, KG, and RAG as tools for AI agents
The npm package gctrl-mcp receives a total of 69 weekly downloads. As such, gctrl-mcp popularity was classified as not popular.
We found that gctrl-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.