
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
MCP launcher for Quackr — virtual phone numbers for SMS verification and OTP receipt. Bridges stdio MCP clients to the hosted Quackr server at https://mcp.quackr.io/.
Official MCP server for Quackr — virtual phone numbers for SMS verification and OTP receipt. Use Claude (or any MCP-compatible client) to check pricing and inventory, purchase temporary numbers, and read incoming SMS programmatically.
quackr-mcp — npx -y quackr-mcphttps://mcp.quackr.io/Authorization: Bearer YOUR_API_KEY header| Tool | Description |
|---|---|
get-balance | Get the current account balance in USD |
get-pricing | Get phone number rental pricing for a specific country |
get-inventory | Check available phone number inventory for a country |
purchase-number | Purchase a temporary number for receiving SMS (deducts from balance) |
check-sms | Check SMS messages received on a rented number |
list-active-numbers | List all currently active (rented) numbers on the account |
The quackr-mcp package is a thin stdio
launcher that bridges any stdio MCP client to the hosted Quackr endpoint. It needs
Node.js 18+ — no separate install required, npx fetches it on first run.
{
"mcpServers": {
"quackr": {
"command": "npx",
"args": ["-y", "quackr-mcp"],
"env": {
"QUACKR_API_KEY": "YOUR_API_KEY_HERE"
}
}
}
}
You can also pass the key as a flag instead of an env var: npx -y quackr-mcp --api-key YOUR_API_KEY_HERE.
Remote (recommended) — connect directly to the hosted endpoint. Add to your
~/.claude.json (or a project .mcp.json):
{
"mcpServers": {
"quackr": {
"type": "http",
"url": "https://mcp.quackr.io/",
"headers": {
"Authorization": "Bearer YOUR_API_KEY_HERE"
}
}
}
}
Or via the CLI:
claude mcp add --transport http quackr https://mcp.quackr.io/ --header "Authorization: Bearer YOUR_API_KEY_HERE"
Claude Desktop's JSON config only supports local (stdio) servers. Use the npm
launcher (see Install via npm) by adding the npx quackr-mcp
config above to claude_desktop_config.json, then restart Claude Desktop.
Alternatively, add Quackr as a remote connector: Settings → Connectors → Add
custom connector, enter https://mcp.quackr.io/, and add an Authorization
header with the value Bearer YOUR_API_KEY.
Any client supporting remote Streamable HTTP MCP servers with custom headers works. Point it at https://mcp.quackr.io/ and pass your key via the Authorization: Bearer YOUR_API_KEY header.
Quackr also exposes a full REST API at https://api.quackr.io/ — see api.quackr.io/swagger.json for the full spec. Same x-api-key auth.
MIT — see LICENSE.
FAQs
MCP launcher for Quackr — virtual phone numbers for SMS verification and OTP receipt. Bridges stdio MCP clients to the hosted Quackr server at https://mcp.quackr.io/.
The npm package quackr-mcp receives a total of 39 weekly downloads. As such, quackr-mcp popularity was classified as not popular.
We found that quackr-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.