
Security News
Microsoft Releases Open Source Toolkit for AI Agent Runtime Security
Microsoft has released an open source toolkit for enforcing runtime security policies on AI agents as adoption accelerates faster than governance controls.
A comprehensive Node.js CLI tool and API library for managing authentication, groups, and bearer tokens in the Managers.Center system.
loginManager(email, password): Programmatic manager logincheckManager(managerAuth): Verify manager authentication statusgetGroupList(managerAuth): Retrieve all manager groupsgenerateBearerToken(managerAuth, groupCode, secsToExpired?, aud?): Generate bearer token for specific groupnpm install -g managercc
npm install managercc
managercc signup
managercc login
managercc create group
managercc list
managercc generate bearertoken
managercc get publickey
| Command | Description | Example |
|---|---|---|
signup | Register a new manager account | managercc signup |
login | Login with manager credentials | managercc login |
logout | Logout current session | managercc logout |
whoami | Check current login status | managercc whoami |
create group | Create a new group | managercc create group |
list | List all manager groups | managercc list |
generate bearertoken | Generate bearer token for group | managercc generate bearertoken |
get publickey | Get manager's public key | managercc get publickey |
const managercc = require('managercc');
// Login and get authentication
async function setupManager() {
const loginResult = await managercc.loginManager('your-email@example.com', 'your-password');
if (loginResult.success) {
const managerAuth = loginResult.data.auth;
console.log('Login successful:', loginResult.data.manager.suuid);
return managerAuth;
} else {
console.error('Login failed:', loginResult.message);
return null;
}
}
// Login manager
const loginResult = await managercc.loginManager('manager@example.com', 'password123');
// Check authentication status
const checkResult = await managercc.checkManager(managerAuth);
if (checkResult.success) {
console.log('Manager authenticated:', checkResult.data.manager.name);
}
// Get all groups
const groupsResult = await managercc.getGroupList(managerAuth);
if (groupsResult.success) {
console.log(`Found ${groupsResult.data.total} groups:`);
groupsResult.data.groups.forEach(group => {
console.log(`- [${group.code}] ${group.name}`);
});
}
// Generate bearer token for a specific group
const tokenResult = await managercc.generateBearerToken(managerAuth, 'group-code', 3600, 'api-client');
if (tokenResult.success) {
console.log('Token generated successfully!');
console.log('Token:', tokenResult.data.token);
console.log('Expires in:', tokenResult.data.expiresIn, 'seconds');
console.log('Audience:', tokenResult.data.audience);
} else {
console.log('Token generation failed:', tokenResult.message);
}
const managercc = require('managercc');
async function completeWorkflow() {
try {
// 1. Login manager
const login = await managercc.loginManager('manager@example.com', 'password');
if (!login.success) throw new Error('Login failed');
// 2. Check authentication
const check = await managercc.checkManager(login.data.auth);
if (!check.success) throw new Error('Authentication check failed');
// 3. Get groups
const groups = await managercc.getGroupList(login.data.auth);
if (!groups.success) throw new Error('Failed to get groups');
// 4. Generate token for first group
const firstGroup = groups.data.groups[0];
const token = await managercc.generateBearerToken(
login.data.auth,
firstGroup.code,
7200, // 2 hours
'my-app' // audience
);
if (token.success) {
console.log('Complete workflow successful!');
console.log('Generated token for group:', firstGroup.code);
console.log('Token expires in:', token.data.expiresIn, 'seconds');
}
} catch (error) {
console.error('Workflow failed:', error.message);
}
}
completeWorkflow();
loginManager(email, password)Login a manager and return authentication data.
Parameters:
email (string): Manager's email addresspassword (string): Manager's passwordReturns:
{
success: boolean,
message: string,
data: {
manager: {
suuid: string,
loginTime: string
},
auth: {
suuid: string,
accessToken: string
}
}
}
checkManager(managerAuth)Verify manager authentication status.
Parameters:
managerAuth (object): Authentication object from loginReturns:
{
success: boolean,
message: string,
data: {
manager: {
suuid: string,
name: string,
email: string,
status: string,
checkedAt: string
},
auth: object
}
}
getGroupList(managerAuth)Retrieve all groups for the authenticated manager.
Parameters:
managerAuth (object): Authentication object from loginReturns:
{
success: boolean,
message: string,
data: {
groups: [
{
index: number,
suuid: string,
code: string,
name: string,
created_at: number,
manager_suuid: string
}
],
total: number,
manager: {
suuid: string,
name: string
}
}
}
generateBearerToken(managerAuth, groupCode, secsToExpired?, aud?)Generate a bearer token for a specific group.
Parameters:
managerAuth (object): Authentication object from logingroupCode (string): Code of the group to generate token forsecsToExpired (number, optional): Token expiration time in seconds (default: 3600)aud (string, optional): Token audience (default: null)Returns:
{
success: boolean,
message: string,
data: {
groupCode: string,
token: string,
expiresIn: number,
audience: string,
generatedAt: string,
manager: {
suuid: string
}
}
}
Example:
// Basic usage
const token = await managercc.generateBearerToken(managerAuth, 'my-group');
// With custom expiration and audience
const token = await managercc.generateBearerToken(
managerAuth,
'my-group',
7200, // 2 hours
'api-client' // custom audience
);
if (token.success) {
console.log('Token:', token.data.token);
console.log('Expires in:', token.data.expiresIn, 'seconds');
}
This project is licensed under the ISC License - see the LICENSE file for details.
Version: 1.1.8
Last Updated: 2025-10-17
FAQs
controller @ managers.center
We found that managercc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Microsoft has released an open source toolkit for enforcing runtime security policies on AI agents as adoption accelerates faster than governance controls.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.