
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@undisk-mcp/stdio-proxy
Advanced tools
Bridges local stdio MCP clients (like Claude Desktop) to the remote Undisk MCP edge server over Streamable HTTP.
npx -y @undisk-mcp/stdio-proxy
Or install globally:
npm install -g @undisk-mcp/stdio-proxy
undisk-proxy
UNDISK_API_KEY — your Undisk MCP API key (required)UNDISK_ENDPOINT — server endpoint (default: https://mcp.undisk.app)To target a specific workspace, set UNDISK_ENDPOINT with a ?workspace= query
parameter. Quote the URL to prevent your shell from interpreting the ?:
UNDISK_API_KEY=sk_live_xxx \
UNDISK_ENDPOINT='https://mcp.undisk.app?workspace=YOUR_WORKSPACE_ID' \
npx -y @undisk-mcp/stdio-proxy
# Default workspace
codex mcp add undisk \
--env UNDISK_API_KEY=sk_live_xxx \
-- npx -y @undisk-mcp/stdio-proxy
# Specific workspace (quote the URL to avoid zsh glob errors)
codex mcp add undisk-myproject \
--env UNDISK_API_KEY=sk_live_xxx \
--env 'UNDISK_ENDPOINT=https://mcp.undisk.app?workspace=YOUR_WORKSPACE_ID' \
-- npx -y @undisk-mcp/stdio-proxy
npx -y @undisk-mcp/setup-claude --api-key sk_live_xxx
claude mcp add --transport http undisk \
'https://mcp.undisk.app/v1/mcp?workspace=YOUR_WORKSPACE_ID' \
--header "Authorization: Bearer sk_live_xxx"
The proxy reads JSON-RPC messages from stdin, forwards them to the Undisk MCP server via Streamable HTTP, and writes responses to stdout. This enables tools that only support local stdio transports (e.g., Claude Desktop) to connect to the remote Undisk MCP workspace.
MIT
FAQs
Bridges local stdio MCP clients to the remote Undisk MCP edge server
We found that @undisk-mcp/stdio-proxy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.