SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool poisoning attacks.

Production-ready MCP server template with Streamable HTTP transport. Supports Node.js (Hono) and Cloudflare Workers. Includes OAuth 2.1, multi-tenant sessions, tool/resource/prompt registration, and AES-256-GCM token encryption.

Remote MCP server (SEE + Streamable HTTP) implementing the MCP spec's authorization extension. Use directly from your agents, or from Cursor / Claude with mcp-remote

Example MCP Server using Streamable HTTP + OAuth Discovery for Spotify MCP

Reference mcp server implementation of draft mcp oauth spec https://modelcontextprotocol.io/specification/draft/basic/authorization#2-3-authorization-server-discovery

OAuth-based multi-user Slack MCP server with HTTP transport

A playground for Model Context Protocol (MCP) server built with TypeScript and Streamable HTTP transport with an OAuth Proxy for 3rd party authorization servers like Auth0

This project is a secure MCP server built with Node.js and Express. It features HTTPS encryption using self-signed certificates, GitHub OAuth authentication, and additional security measures like rate limiting and HTTP header protection.

A minimal MCP-HTTP-template that allows to distribute MCP server access via API-key authorization instead of the more complex OAuth approach.

Comprehensive Google MCP server in Rust — 41 tools for Google Drive (Gmail & more planned). Stdio + Streamable HTTP with multi-user OAuth.

MySQL MCP Server: Secure Administration & Observability Featuring Code Mode— One Tool Replacing All 192 Specialized Tools for up to 90% Token Savings. Includes Connection Pooling, HTTP/SSE, OAuth 2.1, Deterministic Error Handling, Advanced Encryption, and Full Support for ProxySQL, MySQL Router & MySQL Shell.

Streamable HTTP to stdio proxy client for MCP servers with OAuth support

MCP knowledge base server with SQLite FTS5, Streamable HTTP transport, and OAuth 2.0

QuickBooks Online MCP server rebuilt on Cloudflare Workers with OAuth 2.0, typed Zod schemas, and Streamable HTTP/SSE transport. Drop-in compatible with LibreChat and other MCP clients.

The first fully MCP 2025-11-25 compliant C++ SDK - Build production-ready MCP servers and clients with complete protocol support including Streamable HTTP transport and OAuth-based authorization.

SQLite MCP Server for Secure Database Administration and Observability with 139 Specialized Tools, Code Mode (90% token savings), Token-Optimized Payloads, 17 Resources, 10 Prompts, Smart Tool Filtering, Dual-Transport HTTP/SSE, OAuth 2.1 Authentication & Granular Access Control, and Deterministic Error Handling. WASM and better-sqlite3 variants.

MCP (Model Context Protocol) server with OAuth 2.0 authentication support. Implements both stdio and HTTP transports with configurable Auth0 integration for secure API access.

MCP Streamable HTTP Server with Device Flow OAuth

Example MCP server with OAuth based on https://developers.cloudflare.com/agents/guides/remote-mcp-server/

Pokemon MCP Server with Cloudflare Access OAuth — Node.js Streamable HTTP

Streamable HTTP MCP server for Google Calendar and Sheets with OAuth management

Self-hosted MCP server: Spotify Web API tools for Claude (OAuth PKCE, Streamable HTTP)

MCP server demonstrating OAuth 2.1 authorization with Keycloak - dual transport (stdio/HTTP) joke server with protected and public tools

Open-source MCP server connecting AI assistants to Monarch Money personal finance data. 20+ tools, OAuth 2.1, dual transport (stdio + HTTP).

A Model Context Protocol (MCP) server that provides intelligent educational program recommendations using PostgreSQL as the data backend. The server offers both local MCP protocol support for Claude Desktop integration and cloud-deployed HTTP API endpoints with GitHub OAuth authentication.

Production-ready Asana MCP server with OAuth 2.0 for Claude Code CLI. Features 22 comprehensive tools for task and project management, HTTP/SSE transport, and Railway deployment.

HTTP MCP server with OAuth authentication

A python lambda implementation with HTTPS api, using OAuth and standalone client

No description available

gdocs MCP Server - Streamable HTTP with Google OAuth