
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@openenthrium/oe-mcp
Advanced tools
OE MCP Server - connect Claude Code, Cursor & Windsurf to enterprise data sources. One JSON config.
@openenthrium/oe-mcpConnect Claude Code, Cursor, Windsurf, Codex, Claude Desktop, and VS Code to enterprise data sources — databases, APIs, files, SSH, messaging, and more. One binary. One JSON config.
1. Create oe-mcp.json:
{
"connectors": [
{ "name": "my-postgres", "type": "postgresql", "host": "localhost", "port": 5432, "database": "mydb", "user": "postgres", "password": "secret" },
{ "name": "my-github", "type": "github", "repoUrl": "https://github.com/your-org/your-repo", "personalAccessToken": "ghp_xxxxxxxxxxxx" },
{ "name": "my-slack", "type": "slack", "botToken": "xoxb-xxxxxxxxxxxx" },
{ "name": "my-codebase", "type": "filesystem", "basePath": "/home/user/projects/myapp" },
{ "name": "my-api", "type": "rest-api", "baseUrl": "https://api.company.com", "headers": { "Authorization": "Bearer xxxx" } }
],
"memory": [
{ "key": "team", "value": "Platform Engineering" }
]
}
2. Add to your AI app's MCP config:
macOS / Linux:
{
"mcpServers": {
"oe-mcp": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@openenthrium/oe-mcp", "--stdio", "/path/to/oe-mcp.json"]
}
}
}
Windows:
{
"mcpServers": {
"oe-mcp": {
"type": "stdio",
"command": "npx.cmd",
"args": ["-y", "@openenthrium/oe-mcp", "--stdio", "C:\\path\\to\\oe-mcp.json"]
}
}
}
-yis required — without it npx blocks waiting for keyboard input and the MCP connection never opens.
3. Reload your AI app — connectors appear as tools automatically.
Ask Claude: "What connectors do you have access to?" to verify.
| Tool | Description |
|---|---|
memory_set | Store a key-value pair |
memory_get | Retrieve a stored value |
memory_list | List all stored pairs |
memory_delete | Remove a stored key |
| Tool | Description |
|---|---|
log_list | List recent connector calls (supports limit) |
log_clear | Clear all log entries |
Execute OE Runtime SKILL.md agents or YAML agents directly from Claude Code, Cursor, or any MCP client:
| Tool | Description |
|---|---|
run_agent | Run an agent by file path — auto skills execute immediately; manual skills pause with pending_skill_chain |
list_pending_skills | List all manual skills currently paused and waiting for approval |
approve_chain | Approve, skip, or abort a paused manual skill by chain_id |
approve_chain parameters:
| Parameter | Description |
|---|---|
chain_id | From pending_skill_chain.chain_id in a run_agent response |
approved | true to run the skill (default), false to skip and continue |
abort | true to stop the entire pipeline immediately |
Example: Tell Claude Code — "Run the OE Skills orchestrator. Approve the hello-world skill, skip email, abort if anything asks for credentials." Claude handles the full approval loop using run_agent and approve_chain.
| Mode | Flag | Best for |
|---|---|---|
| stdio | --stdio | Claude Code, Cursor, Windsurf, Codex, Claude Desktop |
| HTTP | --serve --port 4040 | Cloud deployments, team sharing |
postgresql · mysql · mongodb · redis · elasticsearch · s3 · gdrive · github · slack · gmail · smtp · ssh · filesystem · rest-api · graphql · jira · hubspot · kafka · mqtt · notion · confluence · salesforce · telegram · and 20+ more
| ⚡ Agent Runtime | open-enthrium-ai-agent-runtime — run SKILL.md agents as CLI or HTTP server |
| 🖥️ Platform | open-enthrium-ai-platform — full web app with workspaces, RAG, Agent Builder |
| 🌐 Website | openenthrium.com |
Apache-2.0 — free to use, modify, and deploy for any purpose, including commercial use. No usage limits. No telemetry. No call-home.
FAQs
OE MCP Server - connect Claude Code, Cursor & Windsurf to enterprise data sources. One JSON config.
The npm package @openenthrium/oe-mcp receives a total of 299 weekly downloads. As such, @openenthrium/oe-mcp popularity was classified as not popular.
We found that @openenthrium/oe-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.