
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
nsgoods-mcp
Advanced tools
Unified MCP server for the nsgoods x402 oracle suite: signed, pay-per-call USDC-on-Base tools for crypto signals, ERC-8004 agent trust, market regime, web/GEO extractability and US solar legality — plus a free preview for each — for Claude Desktop, Cursor
Unified MCP server for the nsgoods x402 oracle suite — the verifiable trust layer for AI agents. It exposes every paid endpoint of the five nsgoods services as MCP tools (plus a free preview for each), and pays per call in USDC on Base via the x402 protocol.
| Service | Subdomain | Tools |
|---|---|---|
| Kraken Crypto Signals | signals.nsgoods.org | signals, signals_top, indicators, regime_changed, history, backtest |
| Agent Trust Oracle (ERC-8004) | trust.nsgoods.org | agent_trust |
| CMC Regime Skill | regime.nsgoods.org | regime |
| Extractability Oracle (web/GEO) | schema.nsgoods.org | extractability, extractability_html |
| Solar Legality Oracle | solar.nsgoods.org | solar_legality, solar_legality_all |
| Free previews | — | signals_preview, trust_preview, regime_preview, extractability_preview, solar_preview |
Every paid answer is ECDSA-signed and appended to a public, tamper-evident hash chain, so an agent can verify authenticity before trusting it.
Payment is automatic. When a paid endpoint returns HTTP 402, @x402/axios signs a
USDC payment on Base with your wallet and retries — no accounts, no API keys. You only
pay for the paid tools; every *_preview tool is free and needs no wallet.
Set EVM_PRIVATE_KEY to a low-balance Base hot wallet with a little USDC to enable the
paid tools. Without it, the server still runs and the previews work; paid tools return a
friendly "set EVM_PRIVATE_KEY" message.
npm install -g nsgoods-mcp
EVM_PRIVATE_KEY=0x... nsgoods-mcp # stdio MCP server
claude_desktop_config.json){
"mcpServers": {
"nsgoods": {
"command": "npx",
"args": ["-y", "nsgoods-mcp"],
"env": { "EVM_PRIVATE_KEY": "0xYOUR_BASE_WALLET_KEY" }
}
}
}
Omit EVM_PRIVATE_KEY to use only the free preview tools.
EVM_PRIVATE_KEY is a spending key. Use a dedicated, low-balance Base wallet funded
with only what you intend to spend. Never commit it. Prices per call range from $0.005 to
$0.25 (see each tool description).
MIT © Nikoble1926
FAQs
Unified MCP server for the nsgoods x402 oracle suite: signed, pay-per-call USDC-on-Base tools for crypto signals, ERC-8004 agent trust, market regime, web/GEO extractability and US solar legality — plus a free preview for each — for Claude Desktop, Cursor
The npm package nsgoods-mcp receives a total of 22 weekly downloads. As such, nsgoods-mcp popularity was classified as not popular.
We found that nsgoods-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.