
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@getbourdon/client
Advanced tools
Bourdon L6 federation MCP client for TypeScript/Node — query a running Bourdon L6 server (stdio or Streamable HTTP) over @modelcontextprotocol/sdk. Python (pip install bourdon) is the oracle; this client is wire-compatible with its L6 server.
The Bourdon L6 federation MCP client for TypeScript/Node. Query a running
Bourdon L6 server — over a spawned python -m core.l6_server
stdio subprocess, or a long-lived Streamable-HTTP service — from any JS agent.
Wire-compatible with the Python L6 server: results are JSON-parsed from the server's
TextContent envelope, exactly as a Python peer does. Built on @modelcontextprotocol/sdk.
import { BourdonL6Client } from "@getbourdon/client";
// Spawn the Python L6 server over stdio (Python is the oracle):
const bourdon = new BourdonL6Client({ transport: "stdio", library: "~/agent-library" });
await bourdon.findEntity({ name: "Castmore" });
await bourdon.listRecentWork({ limit: 10 });
await bourdon.prepareRecognitionContext({ prompt: userMessage });
await bourdon.close();
// Or a remote federation peer over Streamable HTTP with a Bearer token:
const peer = new BourdonL6Client({ transport: "http", url: "https://peer/mcp", token });
await peer.listAgents();
All ten L6 tools are exposed: queryAgentMemory, listRecentWork, findEntity,
listAgents, exportAgents, getCrossAgentSummary, prepareRecognitionContext,
getDeeperContext, compileCodexTurn, commitToFederation. The server applies its own
per-tool access_level defaults (public for queries, team for recognition), so omitted
args are dropped rather than defaulted client-side.
License: Apache-2.0 (interop client). The Bourdon engine is BUSL-1.1; the canonical implementation is the Python project.
FAQs
Bourdon L6 federation MCP client for TypeScript/Node — query a running Bourdon L6 server (stdio or Streamable HTTP) over @modelcontextprotocol/sdk. Python (pip install bourdon) is the oracle; this client is wire-compatible with its L6 server.
The npm package @getbourdon/client receives a total of 68 weekly downloads. As such, @getbourdon/client popularity was classified as not popular.
We found that @getbourdon/client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.