
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
zeromcp-server
Advanced tools
MCP built for the web!
WebMCP is brought to you by Svix!
WebMCP is a simplified, web-native reimagining of MCP (Model-Command Protocol) designed to work seamlessly in modern web environments.
Traditional MCP was built with the assumption that the client is a desktop application, which introduces a number of problems when trying to run or consume MCP servers in the browser or over standard web APIs.
WebMCP fixes this by redefining MCP for the web:
While MCP has gained traction as a protocol for tooling like Cursor, its architecture wasn't designed with web-first principles in mind. It assumes:
This isn't scalable or friendly for:
Anthropic and others are trying to address this by bolting HTTP transport layers onto traditional MCP — but the core issues remain.
WebMCP takes a different approach: start with the web in mind.
WebMCP defines a minimal set of RESTful APIs that MCP clients (like Cursor) can use to interact with your service.
Instead of building or running a full MCP server, you simply expose standard web endpoints. We've designed these to be as simple and familiar as possible to typical web developers.
Browser / Client
↓
WebMCP API (your REST server)
↓
Reference WebMCP → MCP Bridge (optional)
↓
Cursor / MCP client
Implement the core WebMCP REST endpoints as described in our API spec.
These are lightweight and should be easy to add to any existing web service.
This open-source adapter translates WebMCP APIs into a traditional MCP server interface.
# Clone and run the reference bridge
git clone https://github.com/your-org/webmcp-bridge.git
cd webmcp-bridge
npm install
npm start -- --endpoint=https://your-webmcp-api.com
Once running, the reference bridge can be used like any other MCP server.
WebMCP is still evolving, but it's usable today. We're actively working on:
Please open an issue or pull request to discuss improvements.
MIT
FAQs
The ZeroMCP local MCP server.
We found that zeromcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.