
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
global-intel-exchange-mcp
Advanced tools
MCP server exposing the Global Intelligence Exchange x402 API (US sanctions screening, NVD CVE lookups, SEC/Companies House company checks) as tools for Claude and other MCP hosts. Pays per query with your own wallet via x402/USDC on Base.
MCP server for the Global Intelligence Exchange x402 API — exposes real US sanctions screening, NVD CVE lookups, and SEC/Companies House company checks as tools any MCP-compatible agent (Claude Desktop, Claude Code, and others) can call directly.
Every call is a real, paid request — settled in USDC on Base, using a wallet you control. This server never holds funds itself.
sanctions_screening — US Consolidated Screening List (OFAC SDN, BIS Denied Persons/Entity List, State Dept lists)cve_lookup — NIST National Vulnerability Databasecompany_registry_check — SEC EDGAR (US) + UK Companies House, checked in parallelCreate a new wallet (Coinbase Wallet or MetaMask), export its private key
(0x...), and fund it with a small amount of USDC on Base mainnet
(each query costs $0.02–$0.05). Use a dedicated wallet, not your main one.
npm install -g global-intel-exchange-mcp
Edit ~/Library/Application Support/Claude/claude_desktop_config.json (Mac)
or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"global-intel-exchange": {
"command": "global-intel-exchange-mcp",
"env": {
"WALLET_PRIVATE_KEY": "0xyour-private-key-here"
}
}
}
}
Restart Claude Desktop. The three tools will now be available.
claude mcp add global-intel-exchange \
-e WALLET_PRIVATE_KEY=0xyour-private-key-here \
-- global-intel-exchange-mcp
Your private key is only used locally to sign x402 payment authorizations.
It is never sent to Global Intelligence Exchange. Fund the wallet with only
what you're comfortable spending — there is no spending cap enforced by this
server. Treat WALLET_PRIVATE_KEY like any other secret.
Every response includes dataSource: LIVE_VERIFIED or
dataSource: AI_ESTIMATE_UNVERIFIED — never mistake an unverified estimate
for a real registry finding. See
DATA_SOURCES.md
for full coverage details per vector.
FAQs
MCP server exposing the Global Intelligence Exchange x402 API (US sanctions screening, NVD CVE lookups, SEC/Companies House company checks) as tools for Claude and other MCP hosts. Pays per query with your own wallet via x402/USDC on Base.
The npm package global-intel-exchange-mcp receives a total of 24 weekly downloads. As such, global-intel-exchange-mcp popularity was classified as not popular.
We found that global-intel-exchange-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.