
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
revnuvo-trust-mcp
Advanced tools
Revnuvo Trust MCP server: verify companies, domains and counterparties from inside any AI agent. Entity resolution (200+ jurisdictions), UBO, sanctions screening, 0-100 fraud scoring. x402-payable ($0.10/call, USDC on Base) or API key.
MCP server for the Revnuvo Trust API — let any AI agent verify companies, domains and counterparties before transacting with them.
| Tool | What it does |
|---|---|
trust_verify | Full trust verification for a domain or URL: trust score, reachability, HTTPS, latency, fraud signals |
domain_trust | Lightweight domain-level score for quick pre-transaction screens |
The underlying Trust API is x402-payable: no account needed. Agents pay $0.10/call in USDC on Base directly to the service wallet via the HTTP 402 flow. Supply an API key instead if you have a Revnuvo subscription (free tier: 100 calls/month → https://www.revnuvo.site).
# Run the server
npx revnuvo-trust-mcp
# Env (either path):
REVNUVO_API_KEY=rnv_... # API-key mode (free tier / subscription)
# or nothing — x402 mode, pay-per-call USDC on Base
{
"mcpServers": {
"revnuvo-trust": {
"command": "npx",
"args": ["revnuvo-trust-mcp"]
}
}
}
curl -X POST https://api.revnuvo.site/v1/trust/verify \
-H "Content-Type: application/json" \
-d '{"domain":"example.com"}'
# → 402 with x402 payment spec, or result with API key
Learn more: https://www.revnuvo.site · llms.txt: https://revnuvo.site/llms.txt
MIT © Revnuvo Technologies Ltd
FAQs
Revnuvo Trust MCP server: verify companies, domains and counterparties from inside any AI agent. Entity resolution (200+ jurisdictions), UBO, sanctions screening, 0-100 fraud scoring. x402-payable ($0.10/call, USDC on Base) or API key.
The npm package revnuvo-trust-mcp receives a total of 285 weekly downloads. As such, revnuvo-trust-mcp popularity was classified as not popular.
We found that revnuvo-trust-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.