
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@mcp-warden/cli
Advanced tools
mcp-warden, the local-first credential broker MCP server for AI coding agents, as a prebuilt binary for your platform.
mcp-warden — a local-first credential
broker for the Model Context Protocol — packaged for npx. Your agent calls
proxy_http, ssh_exec, sftp_transfer or db_query; mcp-warden checks the
request against the preset's allow-list, asks you when the preset says so,
injects the secret from the OS keychain and returns only the result.
{
"mcpServers": {
"mcp-warden": { "command": "npx", "args": ["-y", "@mcp-warden/cli", "mcp"] }
}
}
The same command manages presets and secrets: npx @mcp-warden/cli init,
npx @mcp-warden/cli secret add NAME.
The binary comes from an optional dependency for your platform
(@mcp-warden/darwin-arm64, darwin-x64, linux-x64, linux-arm64,
win32-x64). Nothing is downloaded at install or run time, and there is no
install script.
The unscoped mcp-warden package on npm is an unrelated project.
Documentation, security model and other ways to install: https://github.com/ermoluk/mcp-warden
FAQs
mcp-warden, the local-first credential broker MCP server for AI coding agents, as a prebuilt binary for your platform.
The npm package @mcp-warden/cli receives a total of 756 weekly downloads. As such, @mcp-warden/cli popularity was classified as not popular.
We found that @mcp-warden/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.