Build a secure, production-ready MCP server for any project — connect Claude, ChatGPT & any AI agent to your backend with a URL + API key. Streamable HTTP + stdio + OAuth 2.0 (PKCE).
A production-ready starter to build a secure MCP server for any project Connect Claude, ChatGPT and any AI agent to your backend with just a URL + API key.
MCP Starter Kit scaffolds a secure, online MCP (Model Context Protocol) server for any project. It's the machine-to-machine bridge between an AI agent (Claude Desktop/Web, ChatGPT, or your own agent) and your backend API — each tool maps to one endpoint and is authenticated with an API key + scopes.
The kit is project-agnostic: you provide the project name, backend URL and the list of tools — the templates already ship with all the security hardening baked in.
- Two transports — Streamable HTTP (online, many clients) + stdio (Claude Desktop). - Stateless OAuth 2.0 (PKCE S256) so the ChatGPT app / Claude web (which require OAuth, with no field to paste an API key) can connect. Header-key auth keeps working in parallel. - Security hardening, ready out of the box: - Verify the key against the backend at initialize (blocks pre-auth DoS). - Session cap + idle-TTL sweep, per-IP rate limit on the initialize path. - Bind sha256(key) to the session; SSRF cross-host block + request timeouts. - Audit to stderr (stdout is reserved for JSON-RPC), secrets redacted. - Non-root Dockerfile, TLS terminated at the reverse proxy. - Read-only by default — add a write scope explicitly if you ever need one.
1. Read / run SKILL.md — it asks for the MCP project name and whether your backend already has an API-key system. - Not yet → follow API-KEY-BACKEND-GUIDE.md to build it (hashed keys + scopes + /ext/me + a create/edit/revoke admin tab).
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/fdhhhdjd--MCP-STARTER-KIT.html)
Reliability + security proxy for the Model Context Protocol (MCP): self-healing connections, runtime tool-security (rug-pull/poisoning detection), and a compliance-mapped audit trail.
do-md/homekbLocal-first personal Markdown knowledge base with semantic search, AI Q&A, MCP, desktop/web clients, and a self-hostable zero-data-at-rest relay.
xfloukiex-lab/pandaclipOne local-first MCP server for agent working state — clipboard history & snippets, TTL cache, file-organizer overlay, and a knowledge graph — plus a live desktop activity lens. 40 tools, SQLite everyw
rayhankhilji/jellybeanA token-frugal MCP server that gives coding agents structural understanding of a codebase: repo maps, symbol outlines, ranked search, import tracing, and parsed diagnostics — every result under a toke
ictinnovations/pbx-mcpMCP server for Asterisk and FreeSWITCH. Lets AI assistants inspect channels, SIP registrations, trunk status and dialplan on a live PBX.
CRM-Solid/crmsolid-mcpMCP server for social media. Manage Instagram, WhatsApp, X, LinkedIn and 8 more DM inboxes plus scheduled posts from Claude, Cursor or ChatGPT.
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.