
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
rightcard-mcp
Advanced tools
RightCard MCP — the card-selection oracle for agents. Which of your credit cards to use at any store, from verified data. No bank login.
The card-selection oracle for agents: which of your credit cards should pay here? Answers come from RightCard's bank-published, two-source-verified reward data — the same data the RightCard iOS app uses.
valuation: "points" for conservative travel values.Hosted (stateless Streamable HTTP):
https://mcp.rightcard.ai/mcp
Local (stdio, nothing leaves your machine except a read of the public catalog):
npx rightcard-mcp
Claude Desktop / Claude Code / Cursor config:
{ "mcpServers": { "rightcard": { "command": "npx", "args": ["-y", "rightcard-mcp"] } } }
| tool | what it answers |
|---|---|
best_card | which of the given cards earns most at a store or category, today, with caveats |
lookup_merchant | how a store is coded (category, merchant type, MCC-trap caveat) |
search_cards | find card ids by name/issuer; verified first, unverified flagged |
card | one card's verified rates, rotating windows, choose-your-category spec |
rotating_calendar | live + upcoming rotating windows and permanent merchant benefits |
Try: "I have the Amex Gold, Freedom Flex and Citi Double Cash. Which one at Costco?"
src/engine.ts is a port of the iOS app's Swift engine. fixtures/engine_golden.json holds
3,100+ answers produced by the Swift code over the real catalog and merchant directory;
npm test fails if the port disagrees on any of them. Offers (a user's personal bank offers)
are deliberately not part of this server — they live on the phone.
The hosted server logs request counts only. No identifiers, no cookies, no storage. Full policy: https://rightcard.ai/privacy
FAQs
RightCard MCP — the card-selection oracle for agents. Which of your credit cards to use at any store, from verified data. No bank login.
The npm package rightcard-mcp receives a total of 258 weekly downloads. As such, rightcard-mcp popularity was classified as not popular.
We found that rightcard-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.