Skip to main content

building-mcp-server-on-cloudflare

Builds and deploys remote Model Context Protocol servers on Cloudflare Workers with OAuth authentication and production-ready tools.

Install this skill

or
88/100

Security score

The building-mcp-server-on-cloudflare skill was audited on Mar 7, 2026 and we found 8 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 81

Template literal with variable interpolation in command context

SourceSKILL.md
81const response = await fetch(`https://api.weather.com/${city}`);
low line 191

Access to .env file

SourceSKILL.md
191const result = await this.env.DB.prepare(sql).all();
low line 41

External URL reference

SourceSKILL.md
41Server runs at `http://localhost:8788/mcp`
low line 81

External URL reference

SourceSKILL.md
81const response = await fetch(`https://api.weather.com/${city}`);
low line 122

External URL reference

SourceSKILL.md
122# Open http://localhost:5173, enter http://localhost:8788/mcp
low line 131

External URL reference

SourceSKILL.md
131Server accessible at `https://[worker-name].[account].workers.dev/mcp`
low line 142

External URL reference

SourceSKILL.md
142"args": ["mcp-remote", "https://my-mcp.workers.dev/mcp"]
low line 258

External URL reference

SourceSKILL.md
2583. For local dev, use `http://localhost:8788/callback`
Scanned on Mar 7, 2026
View Security Dashboard