
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
nooxus-mcp
Advanced tools
Nooxus-MCP (v0.1.5) is the official Model Context Protocol (MCP) gateway to real-time, verified global supply chain data.
By installing this into your Claude Desktop, Cherry Studio, or Cursor, you instantly upgrade your AI from a conversational chatbot into a Forensic Sourcing Analyst. It cross-references the AII-NOO verified database to expose shell companies, verify real manufacturers, and draft hyper-targeted RFQs in seconds.
uvx. No messy Python environments needed.You DO NOT need an API key to start. The system will automatically use the built-in trial token.
Open your configuration file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonAdd the following JSON block. That's it!
{
"mcpServers": {
"nooxus-edge": {
"command": "uvx",
"args": [
"nooxus-mcp@latest"
]
}
}
}
(Restart Claude Desktop. You will see the 🔨 hammer icon indicating Nooxus tools are loaded.)
Add a new MCP server and simply specify:
uvxnooxus-mcp@latestTo guarantee the AI uses the verified database and renders the professional UI, always start your prompts with our cheat code: Use Nooxus |
Copy and paste these exact prompts to test the power of Nooxus:
1. Market Scanning & Discovery
"Use Nooxus | I am looking for verified suppliers of 'terminal testing equipment' or 'communication hardware' in Nanjing. Please search your network and guide me."
2. The Deep-Dive Forensic Audit (Killer Feature 🔥) (Once you get a NOO-ID from the search above, run this to expose their true capabilities)
"Use Nooxus | Give me a deep-dive forensic audit on this node: NOO-PFJ77WGLNYHRXDZE. Show me the red flags or trust scores, and offer to draft an RFQ."
semantic_search_nooxus(query) Lightning-fast semantic search optimized for manufacturing entities. Returns a list of potential partners and their NOO-IDs.get_nooxus_node(noo_id) Retrieves the full, unadulterated verification profile using a NOO-ID. Triggers Strategy D to force the AI to act as a Risk Analyst and render a visual warning dashboard.Once you exhaust the generous daily limits of the global trial key, you can seamlessly plug in your own developer API key for unlimited deep-dive audits.
NOOXUS_API_KEY.env block:{
"mcpServers": {
"nooxus-edge": {
"command": "uvx",
"args": ["nooxus-mcp@latest"],
"env": {
"NOOXUS_API_KEY": "your_personal_key_here"
}
}
}
}
Official Portal: SmartGSC.com | Protocol Details: Nooxus.com
FAQs
Official MCP Server for Nooxus Edge Data (Global Supply Chain & Manufacturing)
The pypi package nooxus-mcp receives a total of 18 weekly downloads. As such, nooxus-mcp popularity was classified as not popular.
We found that nooxus-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.