
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@grantex/anthropic
Advanced tools
Anthropic SDK integration for the Grantex delegated authorization protocol
Anthropic SDK integration for the Grantex delegated authorization protocol.
Enforce scopes, log audit trails, and inspect grant tokens when using Claude models with tool use.
npm install @grantex/anthropic @grantex/sdk @anthropic-ai/sdk
import Anthropic from '@anthropic-ai/sdk';
import { createGrantexTool } from '@grantex/anthropic';
const client = new Anthropic();
const readFileTool = createGrantexTool({
name: 'read_file',
description: 'Read a file from disk',
inputSchema: {
type: 'object',
properties: { path: { type: 'string' } },
required: ['path'],
},
grantToken: process.env.GRANT_TOKEN!,
jwksUri: 'https://api.grantex.dev/.well-known/jwks.json',
requiredScope: 'file:read',
execute: async ({ path }) => fs.readFile(path as string, 'utf-8'),
});
const response = await client.messages.create({
model: 'claude-sonnet-4-6',
max_tokens: 1024,
tools: [readFileTool.definition],
messages: [{ role: 'user', content: 'Read config.json' }],
});
for (const block of response.content) {
if (block.type === 'tool_use') {
const result = await readFileTool.execute(block.input as { path: string });
}
}
createGrantexTool() — Wrap any Anthropic tool definition with JWKS token verification and scope enforcementGrantexToolRegistry — Manage multiple tools and dispatch tool_use blocks by namewithAuditLogging() — Wrap tools to automatically log success/failure to the Grantex audit trailhandleToolCall() — Execute a tool from a tool_use block with audit logging in one stepgetGrantScopes() — Decode scopes from a grant token for diagnostics without signature verificationFull docs at grantex.dev/integrations/anthropic.
Apache-2.0
FAQs
Anthropic SDK integration for the Grantex delegated authorization protocol
We found that @grantex/anthropic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.