secure-mcp-server

kalavakuntabharathkumar/secure-mcp-server

3.1

If you are the rightful owner of secure-mcp-server and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.

This project transforms APIs into MCP tools for agent consumption while ensuring security through OAuth/OIDC and JWT validation, with Cequence AI Gateway for enhanced observability and policy enforcement.

Tools
2
Resources
0
Prompts
0

Theme 2 – Secure MCP Server (TypeScript) w/ Cequence Gateway (concept)

This project turns your APIs into MCP tools consumable by agents (Claude Desktop, LangChain, CrewAI) while enforcing OAuth/OIDC via JWT validation. Place Cequence AI Gateway in front for observability, DLP, and policy.

Run

  1. npm i
  2. Copy .env.example → .env and set JWKS_URL, AUDIENCE, ISSUER from your IdP.
  3. npm run dev
  4. POST a Bearer-authenticated MCP JSON RPC to http://localhost:8080/mcp.

Tools

  • http_get({ url })
  • sum_numbers({ numbers })

Cequence

Front this service with Cequence Gateway (reverse proxy). Configure:

  • JWT validation (same audience/issuer)
  • Allow only POST /mcp
  • Rate limiting + logging