
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
@aauth/mcp-stdio
Advanced tools
Stdio-to-HTTP proxy for MCP with AAuth signatures. Bridges a local stdio MCP client (like Claude Code) to a remote HTTP MCP server, signing all requests with AAuth.
Part of aauth-dev/packages-js. Protocol spec: dickhardt/AAuth.
npm install @aauth/mcp-stdio
npx @aauth/mcp-stdio --server https://api.example.com/mcp --agent https://user.github.io
| Flag | Env var | Description |
|---|---|---|
--server, -s | AAUTH_MCP_SERVER | Remote MCP server URL (required) |
--agent, -a | AAUTH_AGENT_URL | Agent identity URL (required) |
--delegate, -d | AAUTH_DELEGATE | Delegate name (default: claude) |
--token-lifetime | AAUTH_TOKEN_LIFETIME | Agent token lifetime in seconds (default: 3600) |
Add to your MCP server config:
{
"mcpServers": {
"my-server": {
"command": "npx",
"args": ["@aauth/mcp-stdio", "--server", "https://api.example.com/mcp", "--agent", "https://user.github.io"]
}
}
}
Or with environment variables:
{
"mcpServers": {
"my-server": {
"command": "npx",
"args": ["@aauth/mcp-stdio"],
"env": {
"AAUTH_MCP_SERVER": "https://api.example.com/mcp",
"AAUTH_AGENT_URL": "https://user.github.io"
}
}
}
}
bridgeTransports(local, remote): Promise<void>Bridges two MCP transports for bidirectional message forwarding.
import { bridgeTransports } from '@aauth/mcp-stdio'
parseArgs(argv): StdioArgsParses CLI arguments with env var fallbacks.
import { parseArgs } from '@aauth/mcp-stdio'
const args = parseArgs(process.argv.slice(2))
// { serverUrl, agentUrl, delegate?, tokenLifetime? }
MIT
FAQs
Stdio-to-HTTP proxy for MCP with AAuth signatures
The npm package @aauth/mcp-stdio receives a total of 216 weekly downloads. As such, @aauth/mcp-stdio popularity was classified as not popular.
We found that @aauth/mcp-stdio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.