
Security News
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.
@aauth/mcp-stdio
Advanced tools
Stdio-to-HTTP proxy for MCP with AAuth signatures. Bridges a local stdio MCP client (like Claude Code) to a remote HTTP MCP server, signing all requests with AAuth.
Part of aauth-dev/packages-js. Protocol spec: dickhardt/AAuth.
npm install @aauth/mcp-stdio
npx @aauth/mcp-stdio --server https://api.example.com/mcp --agent https://user.github.io
| Flag | Env var | Description |
|---|---|---|
--server, -s | AAUTH_MCP_SERVER | Remote MCP server URL (required) |
--agent, -a | AAUTH_AGENT_URL | Agent identity URL (required) |
--delegate, -d | AAUTH_DELEGATE | Delegate name (default: claude) |
--token-lifetime | AAUTH_TOKEN_LIFETIME | Agent token lifetime in seconds (default: 3600) |
Add to your MCP server config:
{
"mcpServers": {
"my-server": {
"command": "npx",
"args": ["@aauth/mcp-stdio", "--server", "https://api.example.com/mcp", "--agent", "https://user.github.io"]
}
}
}
Or with environment variables:
{
"mcpServers": {
"my-server": {
"command": "npx",
"args": ["@aauth/mcp-stdio"],
"env": {
"AAUTH_MCP_SERVER": "https://api.example.com/mcp",
"AAUTH_AGENT_URL": "https://user.github.io"
}
}
}
}
bridgeTransports(local, remote): Promise<void>Bridges two MCP transports for bidirectional message forwarding.
import { bridgeTransports } from '@aauth/mcp-stdio'
parseArgs(argv): StdioArgsParses CLI arguments with env var fallbacks.
import { parseArgs } from '@aauth/mcp-stdio'
const args = parseArgs(process.argv.slice(2))
// { serverUrl, agentUrl, delegate?, tokenLifetime? }
MIT
FAQs
Stdio-to-HTTP proxy for MCP with AAuth signatures
The npm package @aauth/mcp-stdio receives a total of 34 weekly downloads. As such, @aauth/mcp-stdio popularity was classified as not popular.
We found that @aauth/mcp-stdio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.

Research
/Security News
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.