
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
offrouter-mcp
Advanced tools
MCP stdio server for OffRouter. Exposes routing, delegation, and policy tools to any MCP-compatible harness (Claude Code, Codex CLI, Gemini CLI, etc.).
MCP stdio server for OffRouter. Exposes routing, delegation, and policy tools to any MCP-compatible harness (Claude Code, Codex CLI, Gemini CLI, etc.).
npm install offrouter-mcp
Start the server:
offrouter-mcp
# or
offrouter mcp serve
| Tool | Description |
|---|---|
route | Route a prompt through policy and return the chosen provider/model |
delegate | Delegate a sub-task to a specific provider with fallback policy |
status | Return current usage, active subscriptions, and available capacity |
explain_decision | Show why a particular provider/model was chosen for a prompt |
cancel | Cancel an in-flight delegated request |
Claude Code primary model is unchanged in V1; OffRouter routes delegated work.
FAQs
[](https://www.npmjs.com/package/offrouter-mcp) [](https://www.npmjs.com/package/offrouter-mcp) [
Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.