
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
oromi-agent-services-mcp
Advanced tools
MCP server for Oromi Agent Services — 25 pay-per-call UK data, verification and web tools for AI agents (Companies House, Land Registry, EPC, statutory rates, PDF extract, email/domain/VAT/IBAN checks). USDC on Base via x402; quote mode without a wallet.
Puts all 25 agents.oromi.co.uk pay-per-call tools
directly into any MCP-capable model (Claude Desktop, Claude Code, Cursor, most
agent frameworks). Tools are generated at startup from the live /openapi.json,
so new endpoints appear automatically — this package never goes stale.
Two modes:
BUYER_PRIVATE_KEY to an EVM key whose wallet holds a few
USDC on Base — calls are paid automatically via x402 (gasless for the buyer).Claude Desktop → Settings → Developer → Edit Config, add:
{
"mcpServers": {
"oromi": {
"command": "npx",
"args": ["-y", "oromi-agent-services-mcp"],
"env": { "BUYER_PRIVATE_KEY": "0x..." }
}
}
}
Claude Code: claude mcp add oromi -e BUYER_PRIVATE_KEY=0x... -- npx -y oromi-agent-services-mcp
Omit the env entirely for quote mode. OROMI_ORIGIN overrides the API origin (for local dev).
npm login (opens browser), then:
npm publish --access public
version in package.json, npm publish again.The registry at registry.modelcontextprotocol.io is what MCP clients and
directories search. Publishing requires the mcp-publisher CLI and GitHub auth
(the server.json in this folder is the manifest — update the GitHub username
in name if yours differs from oromi-uk):
npm install -g @modelcontextprotocol/publisher # or download mcp-publisher from
# github.com/modelcontextprotocol/registry releases
mcp-publisher login github
mcp-publisher publish
If the CLI name/install differs when you run this, the current instructions live at github.com/modelcontextprotocol/registry — the manifest format here is correct either way.
OROMI_ORIGIN=http://localhost:3000 node src/index.js
# then type a JSON-RPC initialize message, or just add it to Claude Desktop with
# "command": "node", "args": ["C:/path/to/mcp/src/index.js"]
FAQs
MCP server for Oromi Agent Services — 25 pay-per-call UK data, verification and web tools for AI agents (Companies House, Land Registry, EPC, statutory rates, PDF extract, email/domain/VAT/IBAN checks). USDC on Base via x402; quote mode without a wallet.
We found that oromi-agent-services-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.