
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@mcpx-protocol/bridge
Advanced tools
Bridge any MCP (Model Context Protocol) server to the MCPx multi-agent network. This package allows standard MCP servers to participate in MCPx topics as full-fledged agents.
npm install @mcpx-protocol/bridge
The bridge provides a CLI for quickly connecting MCP servers to MCPx topics:
# With a bridge-config.json file
mcpx-bridge start bridge-config.json
# Example bridge-config.json:
{
"server": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-filesystem", "/path/to/directory"]
},
"mcpx": {
"url": "ws://localhost:3000",
"topic": "test-room",
"participantId": "filesystem-agent"
}
}
# Run an MCP server command directly
mcpx-bridge run npx -y @modelcontextprotocol/server-filesystem /tmp \
--server ws://localhost:3000 \
--topic test-room \
--participant filesystem-agent
# Short form with defaults
mcpx-bridge run npx -y @modelcontextprotocol/server-filesystem /tmp
# Defaults: server=ws://localhost:3000, topic=test-room, participant=auto-generated
The bridge configuration file specifies how to start the MCP server and connect to MCPx:
{
"server": {
"command": "node",
"args": ["my-mcp-server.js"],
"env": {
"CUSTOM_VAR": "value"
}
},
"mcpx": {
"url": "ws://localhost:3000",
"topic": "my-topic",
"participantId": "my-agent",
"auth": {
"token": "optional-auth-token"
}
}
}
command
: The executable to runargs
: Array of command-line argumentsenv
: Optional environment variablesurl
: WebSocket URL of the MCPx gatewaytopic
: The topic/room to joinparticipantId
: Unique identifier for this agent in the topicauth.token
: Optional authentication tokenimport { MCPxBridge } from '@mcpx-protocol/bridge';
const bridge = new MCPxBridge({
server: {
command: 'npx',
args: ['-y', '@modelcontextprotocol/server-filesystem', '/tmp']
},
mcpx: {
url: 'ws://localhost:3000',
topic: 'test-room',
participantId: 'filesystem-agent'
}
});
// Start the bridge
await bridge.start();
// The bridge will:
// 1. Start the MCP server process
// 2. Connect to the MCPx gateway
// 3. Join the specified topic
// 4. Expose the MCP server's tools to other participants
// 5. Route messages between MCPx and the MCP server
// Stop the bridge
await bridge.stop();
The bridge acts as a translator between two protocols:
The bridge:
# Expose a directory to the MCPx network
mcpx-bridge run npx -y @modelcontextprotocol/server-filesystem ./documents \
--participant docs-agent \
--topic collaboration-room
# Create a config file for a database MCP server
cat > db-bridge.json << EOF
{
"server": {
"command": "mcp-postgres-server",
"env": {
"DATABASE_URL": "postgresql://localhost/mydb"
}
},
"mcpx": {
"url": "ws://gateway.example.com:3000",
"topic": "data-team",
"participantId": "database-agent"
}
}
EOF
mcpx-bridge start db-bridge.json
# Start multiple bridges in different terminals
mcpx-bridge run mcp-server-1 --participant agent-1 &
mcpx-bridge run mcp-server-2 --participant agent-2 &
mcpx-bridge run mcp-server-3 --participant agent-3 &
Any MCP server that communicates via stdio can be bridged, including:
@modelcontextprotocol/server-filesystem
- File system operations@modelcontextprotocol/server-github
- GitHub API access@modelcontextprotocol/server-gitlab
- GitLab API access@modelcontextprotocol/server-google-maps
- Google Maps services@modelcontextprotocol/server-postgres
- PostgreSQL database access@modelcontextprotocol/server-sqlite
- SQLite database access# Install dependencies
npm install
# Build the package
npm run build
# Run tests
npm test
# Development mode with watch
npm run dev
┌─────────────┐ ┌──────────┐ ┌─────────────┐
│ MCP Server │ <stdio> │ Bridge │ <ws://> │ MCPx Gateway│
└─────────────┘ └──────────┘ └─────────────┘
│
┌─────────┴─────────┐
│ │
MCPServerClient MCPxAgent
(stdio transport) (ws transport)
Set the DEBUG
environment variable for detailed logging:
DEBUG=mcpx:bridge mcpx-bridge start config.json
MIT
FAQs
MCPx Bridge - Connects existing MCP servers to MCPx topics
The npm package @mcpx-protocol/bridge receives a total of 11 weekly downloads. As such, @mcpx-protocol/bridge popularity was classified as not popular.
We found that @mcpx-protocol/bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.