
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@dpf-it/mcp-server
Advanced tools
MCP server for Dynamic Prompt Forge (DPF) - an AI-driven data integration platform built API-first for AI agents. Lets AI agents discover the DPF API, onboard new users, and run end-to-end data integration workflows.
MCP (Model Context Protocol) server for Dynamic Prompt Forge — an AI-driven data integration platform built API-first, with every action available through both the REST API and this MCP server. This server lets AI agents and chat clients discover DPF, register new accounts, connect existing workspaces, and run end-to-end data integration workflows without leaving the conversation.
No account or credentials required to begin — just add the server to your MCP client config:
{
"mcpServers": {
"dpf": {
"command": "npx",
"args": ["-y", "@dpf-it/mcp-server"]
}
}
}
Then in a chat session, ask the agent to "get started with Dynamic Prompt Forge." It will walk you through registering an account (or connecting an existing workspace) and remembers your connection for future sessions.
DPF workspaces issue OAuth2 client_credentials pairs (clientId / clientSecret) from the workspace settings page (or via the login_and_create_workspace / connect_workspace tools below). This server:
~/.dpf/credentials.json (file permissions 0600), keyed by workspace.You can connect multiple workspaces; tools accept an optional workspaceId and default to the first connected one if omitted.
Bootstrap (no auth required)
get_started — explains DPF and reports which workspaces are already connectedregister_account — create a brand-new DPF accountlogin_and_create_workspace — log in, create a workspace, and persist its credentialsconnect_workspace — connect an existing workspace using a clientId/clientSecret from the DPF portallist_workspaces — list locally connected workspacesData operations
list_data_specs, list_jobs, get_job_status, delete_data_spec, submit_querySkills (multi-step workflows)
onboard_data_source — create a data spec, upload sample/format files, run AI analysis, and wait for it to completerun_data_job — create a job for an existing spec, upload data files, start processing, and wait for completion| Env var | Default | Purpose |
|---|---|---|
DPF_API_BASE_URL | https://api.dpf-it.com | DPF REST API base URL |
DPF_OAUTH_TOKEN_URL | ${DPF_API_BASE_URL}/iceberg/v1/oauth/tokens | OAuth2 client_credentials token endpoint |
MIT
FAQs
RETIRED — DPF now runs a remote MCP server at https://api.dpf-it.com/mcp. Installing this package prints setup instructions and exits.
The npm package @dpf-it/mcp-server receives a total of 77 weekly downloads. As such, @dpf-it/mcp-server popularity was classified as not popular.
We found that @dpf-it/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.