
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@modelcontextprotocol/hono
Advanced tools
Hono adapters for the Model Context Protocol TypeScript server SDK - Hono middleware
@modelcontextprotocol/honoHono adapters for the MCP TypeScript server SDK.
This package is a thin Hono integration layer for @modelcontextprotocol/server.
It does not implement MCP itself. Instead, it helps you:
c.get('parsedBody') for Streamable HTTP transportsnpm install @modelcontextprotocol/server @modelcontextprotocol/hono hono
createMcpHonoApp(options?)hostHeaderValidation(allowedHostnames)localhostHostValidation()import { McpServer, WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/server';
import { createMcpHonoApp } from '@modelcontextprotocol/hono';
const app = createMcpHonoApp();
app.all('/mcp', async c => {
// Stateless example: create a server and a transport per request.
const server = new McpServer({ name: 'my-server', version: '1.0.0' });
const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
await server.connect(transport);
return transport.handleRequest(c.req.raw, { parsedBody: c.get('parsedBody') });
});
import { localhostHostValidation } from '@modelcontextprotocol/hono';
const app = createMcpHonoApp();
app.use('*', localhostHostValidation());
FAQs
Hono adapters for the Model Context Protocol TypeScript server SDK - Hono middleware
The npm package @modelcontextprotocol/hono receives a total of 0 weekly downloads. As such, @modelcontextprotocol/hono popularity was classified as not popular.
We found that @modelcontextprotocol/hono demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.