mcpnew

stealth-alpha/mcpnew

★ 0 stars JavaScript Security Updated today

Secure-by-default MCP server scaffolding: deny-all permissions, typed tool stubs, audit hooks pre-wired.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcpnew": {
      "command": "npx",
      "args": [
        "-y",
        "stealth-alpha/mcpnew"
      ]
    }
  }
}

README Excerpt

**Scaffold secure-by-default MCP servers** — TypeScript or JavaScript, with deny-all permissions, typed tool stubs, and audit hooks pre-wired. Every hand-rolled MCP server starts the same way: copy a demo from the docs, register tools as you go, and hope nobody asks "wait, can that tool read my home directory?" Permissions end up allow-all by accident. Audit logging is a TODO. Input schemas drift from handlers.

Topics

climcpmodel-context-protocolscaffoldingsecurity

mcpnew

Quick Install

README Excerpt

Topics

Related Security Servers