
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
lighthouse-mcp
Advanced tools
An MCP server that wraps around Google's Lighthouse tool to help measure various performance metrics for web pages.
This server is available in the Model Context Protocol Registry. Install it using your MCP client or Claude Desktop.
You can run the tool directly using npx without installation:
npx lighthouse-mcp
Install the package globally from npm:
npm install -g lighthouse-mcp
Then run it:
lighthouse-mcp
npm install
npm run build
npm start
Add the following to your MCP settings configuration file:
{
"mcpServers": {
"lighthouse": {
"command": "npx",
"args": ["lighthouse-mcp"],
"disabled": false,
"autoApprove": []
}
}
}
Add the following to your MCP settings configuration file:
{
"mcpServers": {
"lighthouse": {
"command": "node",
"args": ["/absolute/path/to/lighthouse-mcp/build/index.js"],
"disabled": false,
"autoApprove": []
}
}
}
Replace /absolute/path/to/lighthouse-mcp
with the actual path to this project.
Run a comprehensive Lighthouse audit on a URL.
Parameters:
url
(required): The URL to auditcategories
(optional): Array of categories to audit (defaults to all)
device
(optional): Device to emulate (defaults to "mobile")
throttling
(optional): Whether to apply network throttling (defaults to true)Example:
{
"url": "https://example.com",
"categories": ["performance", "accessibility"],
"device": "desktop",
"throttling": false
}
Get just the performance score for a URL.
Parameters:
url
(required): The URL to auditdevice
(optional): Device to emulate (defaults to "mobile")
Example:
{
"url": "https://example.com",
"device": "mobile"
}
Once the MCP server is configured, you can use it with Claude:
What's the performance score for example.com?
Claude will use the get_performance_score
tool to analyze the website and return the results.
Before releasing, ensure you're authenticated with both registries:
NPM Authentication:
npm login
MCP Registry Authentication:
mcp-publisher login github
If your authentication tokens expire, you'll need to re-login to the respective services.
Use the interactive release script to publish to both NPM and the MCP Registry:
./release.sh
The script will:
This ensures consistent releases to both registries with proper version synchronization.
FAQs
MCP server for Google Lighthouse performance metrics
The npm package lighthouse-mcp receives a total of 145 weekly downloads. As such, lighthouse-mcp popularity was classified as not popular.
We found that lighthouse-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.