This template offers a secure-by-default Python starter for Model Context Protocol (MCP) servers, designed to make the safe path the easy path for developers. It prioritizes robust security measures to prevent common vulnerabilities, such as wildcard CORS, unvalidated `Origin` reflection, and excessive request sizes that often lead to real-world incidents. By enforcing an explicit CORS allowlist, strict request body size limits, and optional bearer token authentication, it guides developers towards creating safer MCP implementations from the outset, further supported by a CI gate with `mcp-safety-scanner`.
주요 기능
01Request body size limits to prevent abuse
02Python 3.10+ compatibility
030 GitHub stars
04CI integration with `mcp-safety-scanner`
05Configurable CORS allowlist for origins
06Optional bearer token authentication for endpoint security
