
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@frontmcp/sdk
Advanced tools
Build production-grade MCP servers in TypeScript — decorators, DI, and Streamable HTTP, batteries included.
FrontMCP turns the Model Context Protocol into a typed, declarative framework. You
write @Tool, @Resource, and @App classes; the SDK handles the protocol,
transport, sessions, auth, dependency injection, and execution flow — so the same
server runs on your laptop and ships to production unchanged.
npx frontmcp create my-app # scaffold a new project (recommended)
# …or add to an existing one:
npm install @frontmcp/sdk
Requires Node.js 24+. Full guide → Installation.
import 'reflect-metadata';
import { z } from 'zod';
import { App, FrontMcp, Tool, ToolContext } from '@frontmcp/sdk';
@Tool({ name: 'greet', inputSchema: { name: z.string() } })
class GreetTool extends ToolContext {
async execute({ name }: { name: string }) {
return `Hello, ${name}!`;
}
}
@App({ id: 'hello', name: 'Hello', tools: [GreetTool] })
class HelloApp {}
@FrontMcp({ info: { name: 'Demo', version: '0.1.0' }, apps: [HelloApp], http: { port: 3000 } })
export default class Server {}
Run npm run dev and point any MCP client at it. Full walkthrough → Quickstart.
@FrontMcp server, @App domains, and typed @Tool / @Resource /
@Prompt primitives with Zod schemas; @Agent multi-step chains and @Provider
dependency injection.
(Tools · Resources · Prompts · Agents · Providers)2024-11-05 through 2026-07-28 on one endpoint,
selected per request. The 2026 revision is stateless (no initialize, no session):
server/discover, mirrored request headers, Multi Round-Trip Requests, the tasks
extension, and subscriptions/listen are all built in, and older clients keep
working unchanged.
(Protocol Versions)connectOpenAI / connectClaude / connectLangChain).
(Plugins · Adapters · Ext-Apps · Direct Client)→ Everything is documented at docs.agentfront.dev/frontmcp.
frontmcp — the CLI: scaffolding and dev tooling (frontmcp create, dev, build)@frontmcp/auth — authentication, OAuth, JWKS, credential vault@frontmcp/adapters — OpenAPI adapter@frontmcp/plugins — Cache, Remember, CodeCall, Dashboard@frontmcp/testing — E2E testing framework@frontmcp/ui / @frontmcp/uipack — UI components and build toolsFAQs
FrontMCP SDK
The npm package @frontmcp/sdk receives a total of 1,211 weekly downloads. As such, @frontmcp/sdk popularity was classified as popular.
We found that @frontmcp/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.