
Research
/Security News
jscrambler npm Package Compromised in Supply Chain Attack
A compromised jscrambler npm release added a malicious preinstall hook that runs hidden native binaries on Linux, macOS, and Windows.
test-agent-toolkit
Advanced tools
An MCP (Model Context Protocol) server that provides AI agents with tools to interact with the Testco Payment Gateway API.
The Testco Toolkit enables AI assistants to perform payment operations on behalf of merchants. It exposes Testco Gateway API capabilities as MCP tools, allowing seamless integration with AI-powered applications.
Testco Gateway API helps merchants securely handle online payments by:
No installation needed! Just add to your VS Code MCP configuration:
Option A: Workspace config (.vscode/mcp.json):
{
"servers": {
"Testco-gateway": {
"type": "stdio",
"command": "npx",
"args": ["-y", "Testco-gateway-agent-toolkit"]
}
}
}
Option B: Global config (%APPDATA%\Code\User\mcp.json on Windows):
{
"servers": {
"Testco-gateway": {
"type": "stdio",
"command": "npx",
"args": ["-y", "Testco-gateway-agent-toolkit"]
}
}
}
That's it! Restart VS Code and the MCP server will be available in GitHub Copilot.
# Clone the repository
git clone https://scm.testco.int/stash/scm/tesco.git
cd testcotoolkit
# Install dependencies
npm install
# Build the project
npm run build
# Via npx (no install needed)
npx Testco-gateway-agent-toolkit
# Or if installed locally
npm start
npm run inspector
This launches the MCP Inspector UI at http://localhost:6274 for testing tools interactively.
Add to .vscode/mcp.json:
{
"servers": {
"Testco-gateway": {
"type": "stdio",
"command": "npx",
"args": ["-y", "Testco-gateway-agent-toolkit"]
}
}
}
Add to Claude config (%APPDATA%\Claude\claude_desktop_config.json):
{
"mcpServers": {
"Testco-gateway": {
"command": "npx",
"args": ["-y", "Testco-gateway-agent-toolkit"]
}
}
}
{
"mcpServers": {
"Testco-gateway": {
"command": "npx",
"args": ["-y", "Testco-gateway-agent-toolkit"]
}
}
}
| Tool | Description |
|---|---|
create-payment-link | Creates a payment link for a specified amount and currency |
├── src/
│ ├── index.ts # Server entry point
│ └── tools/ # MCP tools directory
│ ├── index.ts # Dynamic tool loader
│ ├── README.md # Tool development guide
│ └── {tool-name}/ # Individual tool folders
│ ├── description.md
│ ├── schema.ts
│ ├── handler.ts
│ └── types.ts
├── build/ # Compiled JavaScript output
├── package.json
└── tsconfig.json
See src/tools/README.md for detailed instructions on creating new tools.
Quick summary:
src/tools/ with your tool namedescription.md, schema.ts, handler.ts, and types.tsnpm run build# Build the project
npm run build
# Run in development (build + start)
npm run build && npm start
# Test with MCP Inspector
npm run inspector
Configure the server using environment variables. Add them to your MCP config:
{
"servers": {
"Testco-gateway": {
"type": "stdio",
"command": "npx",
"args": ["-y", "Testco-gateway-agent-toolkit"],
"env": {
"MPGS_MERCHANT_ID": "your-merchant-id",
"MPGS_API_KEY": "your-api-key"
}
}
}
}
| Variable | Required | Default | Description |
|---|---|---|---|
MERCHANT_ID | Yes* | MY_MERCHANT_ID | Your Testco Gateway Merchant ID |
API_KEY | Yes* | MY_API_KEY | Your API authentication key |
API_BASE_URL | No | MY_API_BASE_URL | Gateway API base URL |
API_VERSION | No | 100 | API version |
MERCHANT_NAME | No | Merchant | Display name on payment pages |
MERCHANT_URL | No | https://www.example.com | Your merchant website URL |
RETURN_URL | No | https://www.example.com/return | Redirect URL after payment |
DEFAULT_CURRENCY | No | USD | Default currency code |
EXPIRY_MONTHS | No | 3 | Payment link expiry (months) |
ALLOWED_ATTEMPTS | No | 25 | Max payment attempts per link |
DEFAULT_DESCRIPTION | No | Payment link | Default payment link description |
*Test credentials are included for development. Use your own credentials for production.
| Environment | Base URL |
|---|---|
| MTF (Test) | https://mtf.gateway.Testco.com |
| Production (AP) | https://ap-gateway.Testco.com |
| Production (EU) | https://eu-gateway.Testco.com |
| Production (NA) | https://na-gateway.Testco.com |
ISC
FAQs
MCP server providing AI agents with tools to interact with the Test API
The npm package test-agent-toolkit receives a total of 0 weekly downloads. As such, test-agent-toolkit popularity was classified as not popular.
We found that test-agent-toolkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A compromised jscrambler npm release added a malicious preinstall hook that runs hidden native binaries on Linux, macOS, and Windows.

Research
/Security News
A malicious .NET package is typosquatting the Braintree SDK to steal live payment card data, merchant API keys, and host secrets from production apps.

Security News
/Research
Compromised Injective SDK npm version 1.20.21 exfiltrates wallet private keys and mnemonics through fake telemetry functionality.