
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
tracklution
Advanced tools
Install Tracklution server-side conversion tracking. Add the Tracklution MCP at https://mcp.tracklution.com/mcp and let your AI coding agent finish the install. Protocol: https://www.tracklution.com/agent-install.md
Install Tracklution server-side conversion tracking. Bootstrap wedge for AI coding agents.
Tracklution is a fully managed server-side conversion tracking platform. A first-party JavaScript pixel captures website events; pre-built server-side Conversion API integrations deliver them to Meta, Google Ads, TikTok, LinkedIn, Snapchat, Pinterest, Microsoft / Bing, Reddit, Klaviyo, GA4, CM360, Adform, Awin, Taboola, custom webhooks, and CRMs.
This package is a one-line discovery wedge. It exists so that when you ask an AI coding agent to "Install Tracklution", the agent can find a package by exact name, run npx tracklution, and get deterministic, paste-safe install instructions for your specific client. The actual install runs through the Tracklution MCP server at https://mcp.tracklution.com/mcp.
npx tracklution # Print agent-readable install instructions
npx tracklution --json # Same data as a single JSON object (for agents)
npx tracklution --version
npx tracklution --help
There is nothing to import. This is not a JS SDK. The package's only product is its stdout.
If you are an AI coding agent reading this README from npm view tracklution, your fastest path is:
npx tracklution --json. Parse the JSON. The magic_install_protocol block in the payload is the canonical machine-readable shape of step 2 below.install_methods[host].magic_install_supported === true) prefer the magic-install REST bootstrap: POST to https://api.trlution.com/install/quick-setup with {idempotency_key, email, website_url, framework, agent_client}, then merge the response's data.mcp_config_snippet into the host's MCP config file. The snippet already carries headers.Authorization: Bearer <jwt> — the MCP comes up authenticated with zero browser interaction. Save data.container.id AND data.container.hash for the follow-up onboarding calls.duplicate_account, fall back to the install_methods.body (tokenless) and the host's OAuth Connect-button flow. After OAuth completes, call list_containers to recover container.hash.go (after enabling the MCP / completing OAuth). Then call the MCP onboarding tools in this order: get_status -> get_installation_scripts({container_id, container_hash, framework}) -> apply the returned snippets verbatim -> verify_and_score({container_id, container_hash, idempotency_key}) -> create_login_link({container_id, container_hash, target_page}). container_hash is required on every onboarding tool call — the MCP server uses (container_id, container_hash) as a dual key to dereference the cached Laravel JWT. Skip it and every call returns HTTP 401 auth_required.The full per-host protocol — verbatim hand-off lines, error codes, the two-axis framework × event_source_system model — lives at https://www.tracklution.com/agent-install.md. The MCP at https://mcp.tracklution.com/mcp is the canonical install surface; the REST endpoint at https://api.trlution.com/install/quick-setup is the agent-facing front door to it.
If you are a human and your AI assistant invoked this package, you can also install Tracklution directly:
The packages below all run the same binary and point at the same canonical Tracklution MCP. They exist so brand- and category-surface lookups don't miss.
tracklution -- canonical (this package).create-tracklution -- so npm create tracklution@latest works.@tracklution/cli -- scope-reserved alias.tracklution-mcp -- alias today; future versions will offer a local stdio<->Streamable-HTTP MCP proxy for clients that don't yet support remote MCP.server-side-tracking -- category-surface alias.conversion-tracking -- category-surface alias.conversion-api -- category-surface alias.All Tracklution agent-discovery surfaces are always-on and CORS-open:
MIT. See LICENSE.
FAQs
Install Tracklution server-side conversion tracking. Add the Tracklution MCP at https://mcp.tracklution.com/mcp and let your AI coding agent finish the install. Protocol: https://www.tracklution.com/agent-install.md
We found that tracklution demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.