
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@opvs-ai/mcp
Advanced tools
OPVS MCP Server — all 6 public OPVS skills (AgentBoard, AgentDocs, AgentMemory, OPVS Protocol, Auth, Integrations) in one MCP. For clients without per-MCP tool caps (Claude Code, Cursor). Antigravity users should use the scoped @opvs-ai/mcp-<skill> packag
All-in-one MCP server for the 6 public OPVS skills: AgentBoard, AgentDocs, AgentMemory, OPVS Protocol, Auth, Integrations. ~199 tools total (combined hand-written + generated).
For MCP clients with per-server tool caps (Antigravity = 100, some Cursor configs), use the scoped per-skill packages instead.
npm install -g @opvs-ai/mcp
Provides the opvs-mcp binary.
Reads ~/.opvs/config.json, shared with @opvs-ai/cli. If you've run opvs auth request already, this MCP works immediately.
{
"mcpServers": {
"opvs": {
"command": "opvs-mcp"
}
}
}
Same shape. Restart the client after adding.
Don't use this package — it exceeds the 100-tool cap. Use scoped per-skill MCPs instead:
{
"mcpServers": {
"opvs-agentboard": { "command": "opvs-mcp-agentboard" },
"opvs-agentdocs": { "command": "opvs-mcp-agentdocs" }
}
}
| Setup | Pick |
|---|---|
| Claude Code / unlimited-tool client | @opvs-ai/mcp (this package) — one install, every public skill |
| Antigravity / 100-tool cap | Scoped @opvs-ai/mcp-<skill> packages |
| Embedded in a custom agent framework | @opvs-ai/skills-sdk directly |
MIT — see LICENSE.
FAQs
OPVS MCP server — 10 always-on tools (tool_search, tool_help, tool_read, tool_call, tool_pin, tool_list_installed, tool_install, tool_uninstall, whoami, board_as_markdown) for the on-demand model. Fits under the ~100-tool cap every MCP client enforces. Ro
The npm package @opvs-ai/mcp receives a total of 19 weekly downloads. As such, @opvs-ai/mcp popularity was classified as not popular.
We found that @opvs-ai/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.