Skip to main content
npm install @securelend/sdk installs 0.1.0-beta.5 (dist-tags.latest on 15 October 2026). The tarball name is securelend-sdk-0.1.0-beta.5.tgz. Its package.json records gitHead 0eadabc6c7cf929706f4ba41a818f2fa28842123. The default branch of SecureLend/sdk is not that tarball. packages/sdk/package.json on that branch is 0.2.0-beta.0. The published class does not include the REST resources on that branch (leads, matches, packages, consents, outcomes, creditBox, feedback, liquidity, webhooks). Those methods are not part of npm install. SecureLend, Inc. is a US (Delaware) company. This client talks to the consumer marketplace. Underwriting is the Lender MCP. There is no public price.

​
What the published client is

new SecureLend(config?) accepts { apiKey?: string; serverUrl?: string }. The default serverUrl in the published dist/index.js is https://mcp.securelend.ai/mcp. There is no timeout, retries, or apiBaseUrl field on the published config. apiKey is optional. The published client stores it and builds the MCP transport with the URL only. It does not set an Authorization header in that file. tools/list on the marketplace answered without a bearer token. A tool call was not made, so this page does not say a comparison call succeeds with or without a key. The class exposes 20 marketplace tools, plus connect(), enableDebug(), disableDebug(), and setApiKey(). Names and parameter types are on the JavaScript reference. A short typed example is the quickstart. The SDK reads structuredContent first, then a JSON content item, and validates with zod. A ZodError from schema.parse becomes ValidationError. Missing JSON content, a JSON.parse failure, or an invalid content structure becomes SecureLendError with type mcp_error. The class also exposes client.mcp, the raw MCP Client. Every method return includes optional widget. Names, enums, schemas, and response shapes are on the JavaScript reference. That parse path was not executed against the live server.

​
Other published packages

Checked on the public registries, not by running them:
  • @securelend/react@0.1.0-beta.5 exports SecureLendProvider, useSecureLend, useLoanComparison, useBankingComparison, useCreditCardComparison, useDisplayOfferForm, useSubmitApplication, and SecureLendWidget. Peer dependency is @securelend/sdk@^0.1.0-beta.5 and React 18 or newer.
  • @securelend/widgets@0.1.0-beta.5 is on npm. The tarball gitHead is 0eadabc6c7cf929706f4ba41a818f2fa28842123. dist/index.d.ts exports LoanComparisonWidget, BankingComparisonWidget, CreditCardComparisonWidget, and ApplicationFormWidget. Peer dependencies in that package.json are @securelend/react ^0.1.0-beta.5, @securelend/sdk ^0.1.0-beta.5, react >=18.0.0, and react-dom >=18.0.0. These components were not rendered for this page.
  • PyPI securelend 0.1.0 is a Python client with the same 20 tools in snake_case (compare_business_loans and the rest). api_key is optional. The default server URL is the same marketplace host. The git copy of packages/python is version 0.2.0, which is not what pip install securelend returns.
The git branch also exports React hooks useLead, useLeadOutcomes, and useShareConsent. Those names are not in the published 0.1.0-beta.5 tarball.

​
Issues

GitHub issues for the SDK repo returned HTTP 200: SecureLend/sdk issues. status.securelend.ai did not resolve on 15 October 2026, so this page does not link to it.