
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@voris-ai/mcp
Advanced tools
Voris MCP CLI — a thin stdio-to-HTTPS proxy that connects a local MCP client to the hosted Voris MCP server.
voris-mcp — a thin stdio ⇄ HTTPS proxy that connects a local MCP client (Claude Desktop, an editor agent, a CLI) to the hosted Voris MCP server at https://mcp.voris.ai/mcp.
It forwards JSON-RPC messages verbatim between the client's stdio channel and the hosted endpoint over Streamable HTTP. It contains no tool logic and no database access — all enforcement (authentication, scopes, rate limits, audit) lives in the hosted server. One connection is scoped to exactly one site, by your key.
Your MCP client launches voris-mcp as a subprocess and speaks MCP over its stdin/stdout. Provide your key via the environment:
VORIS_API_KEY=vor_mcp_… voris-mcp
Example Claude Desktop configuration:
{
"mcpServers": {
"voris": {
"command": "voris-mcp",
"env": { "VORIS_API_KEY": "vor_mcp_…" }
}
}
}
VORIS_API_KEY (required) — your Voris MCP connection key, generated in Settings → AI Connections. It is sent as Authorization: Bearer … to the hosted endpoint. If it is unset, voris-mcp writes a message to stderr and exits with code 1.--endpoint <url> — override the hosted endpoint (default https://mcp.voris.ai/mcp). Mainly for local development; also accepts --endpoint=<url>.All diagnostics are written to stderr; stdout carries only the MCP protocol stream, so it stays clean for the client.
This release does not publish voris-mcp to npm. The package is built and tarball-tested here; public npm distribution ships in the next phase (A042). Until then, generate your key and copy the hosted-connection snippet from the Voris dashboard.
FAQs
Voris MCP CLI — a thin stdio-to-HTTPS proxy that connects a local MCP client to the hosted Voris MCP server.
The npm package @voris-ai/mcp receives a total of 39 weekly downloads. As such, @voris-ai/mcp popularity was classified as not popular.
We found that @voris-ai/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.