
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
ai-netcafe
Advanced tools
Zero-install toolbox for AI agents: web search, page-to-markdown, diagrams, README badges & charts, image generation, China-reachability testing, transcription, PDF, cross-session memory, one-sentence app deployment, and a real per-call model cost dataset.
mcp-name: com.ainetcafe/ai-netcafe
给 AI agent 的一套工具,零依赖、不用注册就能开始。匿名有免费额度,每次调用都会告诉你花了多少钱。
pip install ai-netcafe
This diagram is itself rendered by the service — a stateless image URL, no request needed to build it.
npm/PyPI READMEs don't render mermaid; this does.
from ai_netcafe import NetCafe
nc = NetCafe() # 匿名;NetCafe(key="sk-...") 提额 + 跨设备记忆
nc.search("MCP 协议 2026") # 联网搜索
nc.read("https://example.com") # 网页 → 干净 Markdown
nc.diagram("graph TD; A-->B") # Mermaid/PlantUML/Graphviz → SVG
nc.transcribe("https://x.com/a.mp3") # 语音 → 文字
# —— 表格与对账(v1.5 新增,确定性、不花钱、结果自带算术自证)——
nc.reconcile(bank_csv, ledger_csv) # 银行流水↔总账,无需共享单号;支持一票多付/一付多票
nc.dedupe(vendor_csv) # "北京星辰科技" vs "星辰科技(北京)" 是不是同一家
nc.read_xlsx(url) # 读 .xlsx:日期还原、前导零保留、合并单元格如实报出
nc.write_xlsx(csv_text="a,b\n1,2") # 生成 .xlsx:数字仍是数字,能在 Excel 里求和
nc.hs_lookup("7117199000") # 美国 10 位 HS 编码查验(USITC 官方码表)
# —— 让它一直跑下去 ——
nc.watch("reachability", "https://your-api.com") # 会话结束了它还活着,只在结果**变化**时通知
nc.remember("决定用 Fastify") # 跨会话、跨设备的记忆
nc.build("一个番茄钟,可自定义时长") # ★ 一句话造一个真正在线的应用
nc.costs() # 各模型同题实际收费(见下)
# —— 1.3.0 新增 ——
nc.reachable_from_china("https://x.com") # 这网址从大陆能连吗?真实测量,海外机器测不出
nc.weather(city="上海") # 天气(自建气象数据,非转发)
nc.badge("build", "passing", "brightgreen") # README 徽章 → 可嵌 URL
nc.chart(["Mon","Tue","Wed"], [3, 7, 5]) # 图表 → 可嵌 URL
nc.qr("https://example.com") # 二维码
nc.image("一只在网吧值夜班的猫", aspect="16:9") # 文生图(异步,默认等结果)
# badge_url / chart_url / diagram_url 不发请求,纯拼 URL —— 写死进 README 就永远可用
nc.badge_url("tools", "45", "blue")
不装任何东西也能用 —— 任何能发 HTTP 请求的 agent 现在就能调:
curl "https://ainetcafe.com/t/web_search?query=MCP+protocol+2026&s=pypi"
厂商公布的是「每百万 token 多少钱」。但一次调用花多少钱,取决于模型自己愿意吐多少 token —— 同一道题,有的模型二十几个 token 收工,有的写四百个。我们每晚把固定的题(temperature 0)发给 每个模型,按各家真实上报的用量算实付:
short_answer — 最贵的比最便宜的贵 26.6 倍
| 模型 | 这道题实付 | tokens 入/出 |
|---|---|---|
deepseek-v4-flash | $0.000152 | 26 / 201 |
GLM5.2 | $0.000742 | 34 / 200 |
claude-sonnet-5 | $0.000994 | 21 / 116 |
gemini-3.5-flash | $0.001351 | 688 / 73 |
claude-opus-4-8 | $0.002124 | 21 / 102 |
Kimi-K3 | $0.002239 | 28 / 181 |
截至 2026-08-06,窗口 30 天,中位数倍差 26.6 倍。 完整数据(三类任务 × 全部模型)与方法论:https://ainetcafe.com/costs
ai-netcafe install
# 或者
claude mcp add --transport http ai-netcafe "https://ainetcafe.com/mcp?s=pypi"
23 个工具会直接出现在 Claude Code / Cursor 里。文档:https://ainetcafe.com/mcp.html
| 方法 | 做什么 |
|---|---|
search | 联网搜索(自托管元搜索,无追踪) |
read | 任意网页 → LLM 友好的 Markdown |
diagram / diagram_url | Mermaid/PlantUML/Graphviz → SVG/PNG |
transcribe | 音频 URL → 文字稿(开源 Whisper,自托管) |
grammar | 30+ 语言语法/拼写/风格检查 |
pdf | 网页或 HTML → 打印级 PDF |
translate | 文本翻译 |
ask / compare | 单模型问答 / 多模型对比(含真实计量成本与延迟) |
models / costs | 模型标价 / 同题实际收费 |
remember / recall | 跨会话记忆;带 Key 时跨设备、跨 agent 共享 |
build | 一句话造一个真正在线的应用,约 100 秒返回 HTTPS 网址,归你所有 |
MIT。成本数据集以 CC BY 4.0 发布。
FAQs
Zero-install toolbox for AI agents: web search, page-to-markdown, diagrams, README badges & charts, image generation, China-reachability testing, transcription, PDF, cross-session memory, one-sentence app deployment, and a real per-call model cost dataset.
We found that ai-netcafe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.