
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@opvs-ai/mcp-runtime
Advanced tools
Shared stdio MCP server runtime used by per-skill OPVS MCP wrappers (@opvs-ai/mcp-agentboard, etc.).
Shared stdio MCP server used by OPVS per-skill MCP wrappers (@opvs-ai/mcp-agentboard, etc.). You usually don't import this directly — use a per-skill package instead.
import { runMcpServer } from "@opvs-ai/mcp-runtime";
import { tools, execute } from "@opvs-ai/skills-sdk/agentboard";
await runMcpServer({
name: "opvs-agentboard",
version: "0.1.0",
tools, // ToolSpec[] from @opvs-ai/skills-sdk/<skill>
execute, // dispatcher from the same skill
});
That's the entire surface. Transport is stdio JSON-RPC; auth flows through @opvs-ai/skills-sdk → @opvs-ai/core from ~/.opvs/config.json.
If you want a different slice of OPVS tools than the three shipped per-skill packages, compose one yourself:
#!/usr/bin/env node
import { runMcpServer } from "@opvs-ai/mcp-runtime";
import { makeExecutor } from "@opvs-ai/skills-sdk";
import { tools as board } from "@opvs-ai/skills-sdk/agentboard";
import { tools as docs } from "@opvs-ai/skills-sdk/agentdocs";
const tools = [...board, ...docs];
await runMcpServer({ name: "opvs-board+docs", version: "0.1.0", tools, execute: makeExecutor(tools) });
This is how to stay under MCP client tool limits while including exactly the skills you need.
ToolSpec, executeTool, makeExecutor liveFAQs
Shared stdio MCP server runtime used by per-skill OPVS MCP wrappers (@opvs-ai/mcp-agentboard, etc.).
The npm package @opvs-ai/mcp-runtime receives a total of 346 weekly downloads. As such, @opvs-ai/mcp-runtime popularity was classified as not popular.
We found that @opvs-ai/mcp-runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.