
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
Model Context Protocol (MCP) server for Rhumb Resolve — agent-native tool intelligence with discovery, capability routing, governed execution, and beta recipe surfaces
Agent-native tool intelligence for the Model Context Protocol.
Three execution layers: raw provider access (Layer 1), intelligent routing (Layer 2), and deterministic composed recipes (Layer 3, beta with a truthful public catalog). Every provider rated with the AN Score. Every execution produces a chain-hashed receipt.
No governed API key needed for discovery. Install and start immediately:
npx -y --package rhumb-mcp@latest rhumb-mcp
Or add to Claude Desktop / Cursor / any MCP client:
{
"mcpServers": {
"rhumb": {
"command": "npx",
"args": ["-y", "rhumb-mcp@latest"]
}
}
}
Ask your agent:
Rhumb is strongest today for research, extraction, generation, and narrow enrichment.
Treat it as capability infrastructure first, not as a general business-agent automation layer yet. Layer 2 is the real production surface today; Layer 3 is still beta with an intentionally sparse public catalog.
Discovery breadth is wider than current execution breadth: Rhumb scores 1,038 services and exposes 415 capability definitions, but current governed execution is concentrated in 16 callable providers.
X-Rhumb-KeyCanonical onboarding map: https://rhumb.dev/docs#resolve-mental-model
Rhumb Resolve — three execution layers:
| Layer | What | How |
|---|---|---|
| Layer 1 | Raw provider access | You pick the provider. Escape hatch + trust anchor. |
| Layer 2 | Capability routing | Rhumb picks the best provider. Cost-optimal with quality floor. |
| Layer 3 | Deterministic recipes (beta) | Compiled DAG workflows. Multi-step, budget-enforced, content-firewalled. No published recipes yet. |
New infrastructure:
execute_capability now returns _rhumb_v2 metadata with attribution and receiptsnpx -y --package rhumb-mcp@latest rhumb-mcp (or npx -y --package rhumb-mcp@latest rhumb-mcp)| Tool | What it does |
|---|---|
find_services | Search indexed Services by what you need them to do |
get_score | Get the full AN Score breakdown for a Service: execution quality, access readiness, autonomy level, tier label, and freshness |
get_alternatives | Find alternative Services, ranked by AN Score |
get_failure_modes | Get known failure patterns, impact severity, and workarounds for a service |
discover_capabilities | Browse Capabilities by domain or search text |
resolve_capability | Given a Capability ID, and optionally a credential mode, returns ranked providers with health status, cost per call, auth methods, endpoint patterns, execute guidance, and machine-readable recovery fields like recovery_hint.resolve_url, recovery_hint.credential_modes_url, and, when applicable, recovery_hint.alternate_execute_hint or recovery_hint.setup_handoff, plus typo recovery when the capability ID is wrong |
{
"mcpServers": {
"rhumb": {
"command": "npx",
"args": ["-y", "rhumb-mcp@latest"],
"env": {
"RHUMB_API_KEY": "rk_your_key_here"
}
}
}
}
Get a governed API key at https://rhumb.dev/auth/login (GitHub, Google, or email — 30 seconds).
| Tool | What it does |
|---|---|
execute_capability | Call a Capability through Rhumb Resolve |
estimate_capability | Estimate the active execution rail, cost, and health before a Capability call; anonymous direct system-of-record paths also preserve machine-readable execute_readiness handoffs |
credential_ceremony | Get step-by-step instructions to obtain API credentials for a Service |
check_credentials | Inspect live credential-mode readiness, globally or for a specific Capability |
rhumb_list_recipes | List the current published Rhumb Layer 3 recipe catalog |
rhumb_get_recipe | Get the full published definition for a Rhumb recipe, including input/output schemas and step topology |
rhumb_recipe_execute | Execute a published Rhumb Layer 3 recipe once one is live in the public catalog |
get_receipt | Retrieve an execution receipt by ID |
| Tool | What it does |
|---|---|
budget | Check or set your call spending limit |
spend | Get your spending breakdown for a billing period: total USD spent, call count, average cost per call, broken down by Capability and by provider |
check_balance | Check your current Rhumb credit balance in USD |
get_payment_url | Get a checkout URL to add credits to your Rhumb balance |
get_ledger | Get your billing history: charges (debits), top-ups (credits), and auto-reload events |
| Tool | What it does |
|---|---|
routing | Get or set how Rhumb auto-selects providers when you don't specify one in execute_capability |
usage_telemetry | Get your execution analytics — calls, latency, errors, costs, and provider health for your Rhumb usage |
Discovery (free): find_services, get_score, get_alternatives, get_failure_modes, discover_capabilities, resolve_capability
Execution (auth): execute_capability, estimate_capability, credential_ceremony, check_credentials, rhumb_list_recipes, rhumb_get_recipe, rhumb_recipe_execute, get_receipt
Financial (auth): budget, spend, check_balance, get_payment_url, get_ledger
Operations (auth): routing, usage_telemetry
Discovery spans 1,038 scored services, but current governed execution spans 16 callable providers.
Best current fit: research, extraction, generation, and narrow enrichment. Treat general business-agent automation as future scope, not the current launch promise.
"I need an email provider for agents."
find_services → search the landscapeget_score → inspect a specific providerget_failure_modes → see where it breaks in practice"I need
email.send. What should I use?"
discover_capabilities → find the capability IDresolve_capability → get ranked providers, optional credential-mode filtering, machine-readable recovery fields like recovery_hint.resolve_url, recovery_hint.credential_modes_url, and, when applicable, recovery_hint.alternate_execute_hint or recovery_hint.setup_handoff, or search suggestions when the capability ID is wrong"Can I call
deployment.listright now, and on which rail?"
check_credentials → call without params for account-wide configured BYOK/direct-bundle readiness, or pass a capability to inspect provider-level mode status and ceremony availability"Send the email with the cheapest provider above my quality floor."
estimate_capability → check the active execution rail, health, and cost before executionexecute_capability → perform the actionget_receipt → verify the HMAC-signed execution record"Is there already a published Rhumb workflow for this?"
rhumb_list_recipes → check what is actually live in the public catalogrhumb_get_recipe → inspect a recipe only after it appears thererhumb_recipe_execute → run the compiled recipe once it is publishedNo account needed — pay per call with USDC on Base:
{
"env": {
"RHUMB_X402_WALLET_ADDRESS": "0x...",
"RHUMB_X402_PRIVATE_KEY": "0x..."
}
}
cd packages/mcp
npm ci
npm run dev
npm test # 84+ tests
npm run type-check
npm run build
https://api.rhumb.dev/v1 (v1 compat) / https://api.rhumb.dev/v2 (Resolve v2)MIT
FAQs
Model Context Protocol (MCP) server for Rhumb Resolve — agent-native tool intelligence with discovery, capability routing, governed execution, and beta recipe surfaces
The npm package rhumb-mcp receives a total of 30 weekly downloads. As such, rhumb-mcp popularity was classified as not popular.
We found that rhumb-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.