
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
statelode-bridge
Advanced tools
statelode-bridge lets stdio-first MCP clients talk to StateLode's hosted Streamable HTTP
MCP endpoint.
npx statelode-bridge --token statelode_live_...
Prefer environment variables in checked-in IDE config:
STATELODE_TOKEN=statelode_live_... npx statelode-bridge
The bridge forwards newline-delimited JSON-RPC from stdio to POST /mcp, keeps
the Mcp-Session-Id header in sync, and relays GET /mcp server-sent events
back to stdio as JSON-RPC notifications.
Different IDEs auto-load different instruction files, so the bridge writes the StateLode rules where each agent will actually see them. There are two commands.
setup — once per machinenpx statelode-bridge setup # add --dry-run to preview
Installs a global StateLode protocol into each installed IDE's global
instruction file — ~/.claude/CLAUDE.md (Claude Code), ~/.codex/AGENTS.md
(Codex), ~/.codeium/windsurf/memories/global_rules.md (Windsurf) — and prints a
block to paste into the IDEs that keep global rules in app settings (Cursor → User
Rules; VS Code → Copilot instructions). It only touches IDEs that are installed,
and upserts a delimited block so it never clobbers your existing rules.
After setup, any agent:
statelode.json, andinit — pin one repo to a projectnpx statelode-bridge init <project-slug> # defaults to the directory name
Writes statelode.json (the marker that maps this repo to a StateLode project)
and a ## StateLode block into every IDE's repo guide file so the project is in
context even without the global setup:
| File | IDE |
|---|---|
AGENTS.md | Codex, Cursor |
CLAUDE.md | Claude Code |
.github/copilot-instructions.md | VS Code (Copilot) |
.cursor/rules/statelode.mdc | Cursor (project rule, alwaysApply) |
Re-running is the refresh path: npx statelode-bridge@latest init rewrites every
guide block with the latest rules (we add agent hints over time) and keeps this
repo's existing pin — no need to pass the slug again. Use @latest so npx doesn't
serve a cached older bridge. For the global block, re-run setup the same way.
--no-agents writes only the marker.
Keep your token in
STATELODE_TOKEN(or the MCP server config) — never instatelode.jsonor any of the guide files.
FAQs
stdio to Streamable HTTP MCP bridge for StateLode
We found that statelode-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.