
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
@frontmcp/adapters
Advanced tools
Adapters that extend FrontMCP servers by auto-generating MCP tools from external specifications.
npm install @frontmcp/adapters
Generate MCP tools from an OpenAPI spec. Each operation becomes a tool with Zod input validation and automatic request/response handling.
import { App } from '@frontmcp/sdk';
import { OpenapiAdapter } from '@frontmcp/adapters';
@App({
id: 'my-app',
name: 'My App',
adapters: [
OpenapiAdapter.init({
name: 'backend:api',
url: 'https://api.example.com/openapi.json',
baseUrl: 'https://api.example.com',
}),
],
})
export default class MyApp {}
Powered by mcp-from-openapi for parameter conflict resolution, multi-security schemes, and request mappers.
Full guide: OpenAPI Adapter
| Topic | Link |
|---|---|
| Adapters overview | Adapters Overview |
| OpenAPI adapter | OpenAPI Adapter |
| Step-by-step guide | Add OpenAPI Adapter |
@frontmcp/sdk — core framework@frontmcp/testing — E2E testing for adapter-generated toolsmcp-from-openapi — underlying OpenAPI-to-MCP engineApache-2.0 — see LICENSE.
FAQs
Adapters for the FrontMCP framework
We found that @frontmcp/adapters demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.