
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
stacktab-mcp
Advanced tools
StackTab MCP server from Compound Labs. Reports published pricing and free-tier limits for SaaS services and estimates a stack's monthly bill. No key and no signup.
stacktab-mcp is the MCP server for StackTab, from Compound Labs. It needs no API key and no signup.
mcp-name: tech.thecompound/stacktab
| Tool | Answers |
|---|---|
lookup_service_pricing(category?, service?) | Published pricing and free-tier limits for auth, database, payments, email and hosting services. Each plan carries the date its published price was last verified against the vendor's own page. |
estimate_stack_cost(stack, users?) | An itemised monthly bill for a named stack at a chosen user count, showing which lines are included in the base fee and which are metered. |
claude mcp add stacktab -- npx -y stacktab-mcp
Claude Desktop, in claude_desktop_config.json:
{
"mcpServers": {
"stacktab": { "command": "npx", "args": ["-y", "stacktab-mcp"] }
}
}
stacktab-mcp --http 8974 serves streamable HTTP on http://127.0.0.1:8974/mcp.
Proprietary. Copyright (c) 2026 Compound Labs. All rights reserved.
FAQs
StackTab MCP server from Compound Labs. Reports published pricing and free-tier limits for SaaS services and estimates a stack's monthly bill. No key and no signup.
The npm package stacktab-mcp receives a total of 0 weekly downloads. As such, stacktab-mcp popularity was classified as not popular.
We found that stacktab-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.