Skip to main content

building-mcp-server-on-cloudflare

Facilitates the creation and deployment of remote MCP servers on Cloudflare Workers, integrating OAuth authentication and tool management.

Install this skill

or
85/100

Security score

The building-mcp-server-on-cloudflare skill was audited on May 15, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 90

Template literal with variable interpolation in command context

SourceSKILL.md
90const response = await fetch(`https://api.weather.com/${city}`);
low line 200

Access to .env file

SourceSKILL.md
200const result = await this.env.DB.prepare(sql).all();
low line 22

External URL reference

SourceSKILL.md
22| MCP docs | `https://developers.cloudflare.com/agents/mcp/` | Server setup, auth, deployment |
low line 23

External URL reference

SourceSKILL.md
23| MCP spec | `https://modelcontextprotocol.io/` | Protocol spec, tool/resource definitions |
low line 24

External URL reference

SourceSKILL.md
24| Workers docs | Search tool or `https://developers.cloudflare.com/workers/` | Runtime APIs, bindings, config |
low line 50

External URL reference

SourceSKILL.md
50Server runs at `http://localhost:8788/mcp`
low line 90

External URL reference

SourceSKILL.md
90const response = await fetch(`https://api.weather.com/${city}`);
low line 131

External URL reference

SourceSKILL.md
131# Open http://localhost:5173, enter http://localhost:8788/mcp
low line 140

External URL reference

SourceSKILL.md
140Server accessible at `https://[worker-name].[account].workers.dev/mcp`
low line 151

External URL reference

SourceSKILL.md
151"args": ["mcp-remote", "https://my-mcp.workers.dev/mcp"]
low line 267

External URL reference

SourceSKILL.md
2673. For local dev, use `http://localhost:8788/callback`
Scanned on May 15, 2026
View Security Dashboard
Installation guide →