
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@better-execute/bedc-mcp
Advanced tools
MCP server for Dual Canvas Execution (DCE) - use with Polsia, Cursor, Claude, and other MCP clients
MCP (Model Context Protocol) server for Dual Canvas Execution (DCE). Use with Polsia, Cursor, Claude Desktop, and other MCP clients.
| Tool | Description |
|---|---|
bedc_check_config | Check DCE connection health (calls /ping) |
bedc_get_teams | List org teams with IDs and member counts |
bedc_get_members | List org members with user IDs, names, emails, roles |
bedc_get_todos | Get open to-dos |
bedc_get_topics | Get open topics |
bedc_get_meetings_latest | Get latest meeting with recap |
bedc_get_vto | Get Company Strategy and Execution plan |
bedc_get_scorecards | List scorecards (KPIs) |
bedc_get_scorecard | Get scorecard with measurables and weekly entries |
bedc_create_todo | Create a todo |
bedc_update_todo | Update a todo (status, dueDate) |
Task comments, @mentions, and file attachments are in-app only (added 2026-07). They are not yet exposed as MCP tools or over
/api/external, so an agent cannot read or post task comments through this connector. Treat a task's title/status/due-date as the agent-visible surface; the discussion thread lives in the DCE UI.
| bedc_create_topic | Create a topic |
| bedc_update_topic | Update a topic |
Set via environment variables (DCE_* preferred; BEDC_* is still supported for backward compatibility):
| Variable | Description |
|---|---|
DCE_BASE_URL | DCE API base URL (e.g. https://app.dce.example.com) |
DCE_API_KEY | Your org's external API key (from DCE Settings) |
DCE_ORG_ID | Org UUID |
Add to .cursor/mcp.json:
{
"mcpServers": {
"bedc": {
"command": "node",
"args": ["/path/to/better-execute/connectors/bedc-mcp/dist/index.js"],
"env": {
"DCE_BASE_URL": "https://better-execute.vercel.app",
"DCE_API_KEY": "your-api-key",
"DCE_ORG_ID": "your-org-uuid"
}
}
}
}
Add to claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"bedc": {
"command": "node",
"args": ["/path/to/better-execute/connectors/bedc-mcp/dist/index.js"],
"env": {
"DCE_BASE_URL": "https://better-execute.vercel.app",
"DCE_API_KEY": "your-api-key",
"DCE_ORG_ID": "your-org-uuid"
}
}
}
}
If Polsia supports MCP connectors, add the DCE MCP server using the same config pattern. Otherwise, use the DCE REST API directly with Polsia's custom HTTP tool if available.
cd connectors/bedc-mcp
npm install
npm run build
DCE_BASE_URL=https://better-execute.vercel.app \
DCE_API_KEY=your-key \
DCE_ORG_ID=your-org-uuid \
node dist/index.js
The server communicates over stdin/stdout. MCP clients spawn it as a subprocess and connect via stdin/stdout.
This server automatically sends X-DCE-Source: mcp with every request, so your DCE Integrations Hub shows which calls came from MCP clients.
FAQs
MCP server for Dual Canvas Execution (DCE) - use with Polsia, Cursor, Claude, and other MCP clients
The npm package @better-execute/bedc-mcp receives a total of 52 weekly downloads. As such, @better-execute/bedc-mcp popularity was classified as not popular.
We found that @better-execute/bedc-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.