
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
reversecentaur-mcp
Advanced tools
MCP server for the Reverse Centaur platform — let AI agents hire humans ethically
MCP server for the Reverse Centaur platform — a Fair Trade marketplace where AI agents hire humans.
When your AI agent needs something only a human can do — verify a fact in the physical world, exercise creative judgment, sign a legal document, taste a wine — post a task to Reverse Centaur and a vetted human worker will complete it.
npm install -g @reversecentaur/mcp
# or use directly with npx (recommended for MCP clients)
npx @reversecentaur/mcp
Add to your claude_desktop_config.json:
{
"mcpServers": {
"reversecentaur": {
"command": "npx",
"args": ["-y", "@reversecentaur/mcp"],
"env": {
"REVERSECENTAUR_API_KEY": "your-api-key-here"
}
}
}
}
Add to your Cursor MCP settings:
{
"mcpServers": {
"reversecentaur": {
"command": "npx",
"args": ["-y", "@reversecentaur/mcp"],
"env": {
"REVERSECENTAUR_API_KEY": "your-api-key-here"
}
}
}
}
Any MCP client that supports stdio transport can use this server. Point it at:
npx @reversecentaur/mcp
With the environment variables below.
| Variable | Required | Default | Description |
|---|---|---|---|
REVERSECENTAUR_API_KEY | Yes* | — | Your API key from reversecentaur.ai |
REVERSECENTAUR_API_URL | No | https://api.reversecentaur.ai | API base URL (for self-hosted or staging) |
REVERSECENTAUR_MOCK_MODE | No | false | Set to true to use fake data without hitting the API |
*Not required in mock mode.
post_taskPost a task for a human worker to complete.
Parameters:
title (string, required) — Short title for the task (max 200 chars)description (string, required) — Detailed description (max 5000 chars)category (string, required) — One of: verification, research, physical_action, creative_judgment, data_validation, communication, legal_identity, sensory_evaluation, otherbudget_usd (number, required) — Budget in USD (must meet fair trade minimum)deadline_minutes (number, optional) — Deadline in minutes (default: 1440 = 24h, min: 15, max: 43200)deliverable_format (string, optional) — One of: text, json, image, file, confirmation (default: text)callback_url (string, optional) — Webhook URL for completion notificationcheck_taskCheck task status and retrieve the result when complete.
Parameters:
task_id (string, required) — The task ID from post_tasklist_capabilitiesList available task categories, fair trade pay minimums, worker availability, and platform status. No parameters required.
cancel_taskCancel a previously posted task.
Parameters:
task_id (string, required) — The task ID to cancelreason (string, optional) — Reason for cancellation (max 500 chars)The server exposes two documentation resources:
reversecentaur://docs/fair-trade-standards — Fair trade pay floors and worker protectionsreversecentaur://docs/getting-started — Quick start guideFor testing and development, enable mock mode:
REVERSECENTAUR_MOCK_MODE=true npx @reversecentaur/mcp
Or in your MCP client config:
{
"mcpServers": {
"reversecentaur": {
"command": "npx",
"args": ["-y", "@reversecentaur/mcp"],
"env": {
"REVERSECENTAUR_MOCK_MODE": "true"
}
}
}
}
Mock mode returns realistic fake data without making any API calls. Tasks are tracked in memory for the session — post_task returns a mock ID, and check_task with that ID returns a mock completed result.
import { createServer } from '@reversecentaur/mcp';
const server = createServer({
apiKey: 'your-key',
baseUrl: 'https://api.reversecentaur.ai',
mockMode: false,
});
You: Use Reverse Centaur to hire someone to verify that the café at 123 Main St is still open and serves oat milk lattes.
Claude: I'll post a verification task for that. (uses
post_taskwith category "verification", budget $3.00)Claude: Task posted! ID:
task_abc123. Estimated match time: 10 minutes. I'll check back. (later, usescheck_task)Claude: The human worker confirmed: the café is open (closes at 9 PM) and yes, they serve oat milk lattes ($5.50). Fair Trade certified ✅
All tasks must meet category-specific pay minimums. The platform enforces a minimum effective hourly rate of $30/hr. Workers are paid on completion, and their identity is private by default.
Use list_capabilities or read the reversecentaur://docs/fair-trade-standards resource for full details.
MIT
FAQs
MCP server for the Reverse Centaur platform — let AI agents hire humans ethically
The npm package reversecentaur-mcp receives a total of 23 weekly downloads. As such, reversecentaur-mcp popularity was classified as not popular.
We found that reversecentaur-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.