About
This template offers a secure-by-default Python starter for Model Context Protocol (MCP) servers, designed to make the safe path the easy path for developers. It prioritizes robust security measures to prevent common vulnerabilities, such as wildcard CORS, unvalidated `Origin` reflection, and excessive request sizes that often lead to real-world incidents. By enforcing an explicit CORS allowlist, strict request body size limits, and optional bearer token authentication, it guides developers towards creating safer MCP implementations from the outset, further supported by a CI gate with `mcp-safety-scanner`.
