
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
Starknet DeFi CLI + MCP Server — Token swaps, staking, lending, gasless transactions
A minimalist command-line interface and AI Agent toolkit for DeFi operations on Starknet. Powered by StarkZap SDK, Fibrous aggregation, and AVNU Paymaster.
StarkFi provides a unified interface for Starknet interactions, designed for both human CLI usage and AI agent workflows (via MCP).
# Via Email OTP (requires starkfi-server)
npx starkfi auth login user@example.com
npx starkfi auth verify user@example.com <code>
# Or via Private Key (local execution)
npx starkfi auth import
# Authentication & Wallet
npx starkfi auth login <email> # Email OTP login
npx starkfi auth verify <email> <code> # Verify OTP
npx starkfi auth import # Import private key
npx starkfi auth logout # Clear session
npx starkfi address # Show active address
npx starkfi deploy # Deploy account on-chain
# Assets & Trading
npx starkfi balance [token] # Show token balances
npx starkfi send <amount> <token> <recipient> # Transfer tokens
npx starkfi trade <amount> <from> <to> # Swap tokens via Fibrous
# Staking
npx starkfi validators # List all validators
npx starkfi pools <validator> # List delegation pools
npx starkfi staking-stats # Full staking dashboard
npx starkfi stake <amount> --pool <pool> # Stake tokens
npx starkfi rewards --pool <pool> [--claim|--compound] # Manage rewards
npx starkfi unstake <intent|exit> --pool <pool> [--amount <amount>] # Unstake
# Network & Config
npx starkfi tx-status <hash> # Check tx receipt
npx starkfi config list # View configuration
npx starkfi config set-rpc <url> # Set custom RPC
npx starkfi config set-network <network> # Set network (mainnet/sepolia)
npx starkfi config set-gasfree <on|off> # Toggle AVNU-sponsored gas
npx starkfi config set-gas-token <token|off> # Pay gas in ERC-20 (USDC, etc)
# Lending (Vesu V2)
npx starkfi lend-pools # List Vesu lending pools
npx starkfi lend-pools Genesis # Filter by name
npx starkfi lend-supply 100 -p Genesis -t STRK # Supply assets to earn interest
npx starkfi lend-withdraw 50 -p Genesis -t STRK # Withdraw supplied assets
npx starkfi lend-borrow -p Genesis --collateral-amount 1 --collateral-token ETH --borrow-amount 500 --borrow-token USDC
npx starkfi lend-repay 250 -p Genesis -t USDC --collateral-token ETH # Repay debt
npx starkfi lend-status -p Genesis --collateral-token ETH --debt-token USDC
StarkFi includes a built-in MCP server, exposing all DeFi capabilities to AI editors like Cursor and Claude.
npx starkfi mcp-start
See MCP.md for editor configuration and the complete tool registry.
MIT
FAQs
AI-native Starknet DeFi CLI + MCP Server + Agent Skills — Swaps, multi-swap, batch (multicall), staking, lending, simulation, portfolio, gas abstraction
The npm package starkfi receives a total of 379 weekly downloads. As such, starkfi popularity was classified as not popular.
We found that starkfi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.