
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@metorial/mcp-session
Advanced tools
MCP session management for Metorial. Provides session handling and tool lifecycle management for Model Context Protocol.
MCP session management for Metorial. Provides session handling and tool lifecycle management for Model Context Protocol.
npm install @metorial/mcp-session
# or
yarn add @metorial/mcp-session
# or
pnpm add @metorial/mcp-session
# or
bun add @metorial/mcp-session
This package provides direct MCP session management for advanced use cases.
import { MetorialMcpSession } from '@metorial/mcp-session';
import { Metorial } from 'metorial';
let metorial = new Metorial({
apiKey: 'your-metorial-api-key'
});
// Create an MCP session instance
let mcpSession = new MetorialMcpSession(metorial, {
serverDeployments: ['your-server-deployment-id']
});
// Get the session metadata
let session = await mcpSession.getSession();
// Get the tool manager
let toolManager = await mcpSession.getToolManager();
// Get available tools
let tools = toolManager.getTools();
// Call a tool directly
let searchContextTool = tools.find(t => t.name === 'searchContext');
if (searchContextTool) {
let toolResponse = await searchContextTool.call({
query: 'metorial websocket explorer',
maxResults: 3
});
console.log('Tool response:', toolResponse);
}
// Clean up the session
await mcpSession.close();
MIT License - see LICENSE file for details.
FAQs
MCP session management for Metorial. Provides session handling and tool lifecycle management for Model Context Protocol.
The npm package @metorial/mcp-session receives a total of 79,001 weekly downloads. As such, @metorial/mcp-session popularity was classified as popular.
We found that @metorial/mcp-session demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.