
Company News
Andrew Becherer Joins Socket as Chief Information Security Officer
Socket’s first CISO brings deep experience securing high-growth SaaS companies as open source supply chain threats accelerate.
@copass/management
Advanced tools
Spec-driven management tool registrar for Copass agents.
This package consumes the copass/spec/management/v1/ JSON
Schema corpus and exposes a transport-agnostic registrar that wires
each tool through @copass/core. An optional MCP adapter lives at
@copass/management/adapters/mcp for Model Context Protocol consumers.
Phase 1 ships the read-only subset (14 tools). Write tools follow in Phase 2.
import { CopassClient } from '@copass/core';
import { registerToMcpServer } from '@copass/management/adapters/mcp';
import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
const client = new CopassClient({
auth: { type: 'api-key', key: process.env.COPASS_API_KEY! },
});
const server = new McpServer({ name: 'my-mcp', version: '0.1.0' });
registerToMcpServer(server, client, { sandboxId: 'sb_...' });
For non-MCP transports, call registerManagementTools directly with
your own register(...) callable.
The package bundles a copy of the JSON Schema corpus under
dist/specs/v1/. In dev, set COPASS_MANAGEMENT_SPEC_DIR to point at
the source tree.
FAQs
Spec-driven management tool registrar for Copass agents (read-only, Phase 1).
The npm package @copass/management receives a total of 52 weekly downloads. As such, @copass/management popularity was classified as not popular.
We found that @copass/management demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket’s first CISO brings deep experience securing high-growth SaaS companies as open source supply chain threats accelerate.

Company News
Replit is integrating Socket Firewall into its AI-powered development experience to help protect builders from malicious open source packages.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.