MCP Kit · TypeScript starter kit
MCP Server Production Kit
The production layer every MCP server needs — OAuth, rate limits, evals & Cloudflare deploy in one kit.
15,930+ MCP servers exist and the tutorials all stop at hello-world. The hard part — the part security review and real clients demand — is auth, rate limiting, observability and tests. This kit is that production layer: OAuth 2.1 middleware, per-tool rate limits, structured logging, schema validation, an eval harness that exercises your tools the way an agent actually calls them, CI config, and a one-command Cloudflare Workers deploy. The MCP spec shipped a new release candidate this week; the kit ships with 12 months of updates so spec churn is our problem, not yours. Ships today with its agent-behavior evals passing 6/6 at packaging. Picks and shovels for the AI gold rush: it pays off whichever server wins.
Built for: TypeScript developers and teams shipping MCP servers that must pass security review
- OAuth 2.1 auth middleware, wired and documented
- Per-tool rate limiting and structured logging
- Tool schema validation with typed registry
- Agent-behavior eval harness — not just unit tests
- One-command Cloudflare Workers deploy + CI config
- 12 months of updates against an actively churning spec
- Hand-written TypeScript, framework-free core
Pick your license
Solo
$79
One developer, unlimited servers.
- The full kit
- OAuth 2.1 + rate limiting + evals
- Cloudflare deploy + CI
- 12 months of updates
One developer's own projects.
Team
$149
Your whole team ships with it.
- Everything in Solo
- Team-wide license
- Priority email support
One team, internal and client servers.
Agency
$349
Unlimited client work.
- Everything in Team
- Unlimited client servers
- Source design files where provided
Unlimited client projects.
Buying more than one line? All-Access gets every template for $499.
Personal
Solo license — one live site for your own single business.
Commercial
Studio license — build one paying client site, plus your own.
Extended
Agency license — unlimited client projects, source files included.
14-day money-back guarantee — if the template doesn't fit, reply to your receipt within 14 days and we refund it in full. Keep nothing, owe nothing.
We'll launch it for you.
Prefer we launch it for you? The done-for-you build puts in your real content and goes live in about a week — $1,500 once, with 90 days of Care Plus included, then $149/mo you can cancel anytime.
Questions
What exactly do I get?
An instant download: the full TypeScript kit (typed tool registry, OAuth 2.1 resource-server auth, KV sliding-window rate limits, structured logging, two example tools), the agent-behavior eval harness, CI config, wrangler config for one-command Cloudflare deploy, real docs, and 12 months of kit updates from your library link. npm test runs typecheck plus the evals — 6/6 at packaging.
Why not just use a free boilerplate?
The leading free Cloudflare boilerplate is unmaintained open source, and the MCP spec is moving — a new release candidate shipped in late July 2026 alone. This kit pairs the production layer (OAuth 2.1, limits, logging, evals) with 12 months of updates, so your server tracks the spec instead of rotting with it.
How is this different from other paid kits?
The paid kits we surveyed target AWS or Vercel and ship unit tests. This one targets Cloudflare Workers with OAuth 2.1 and adds an agent-behavior eval harness — tests that call your tools the way an agent does. That combination didn't exist in our survey.
Was this scoped by AI?
The niche was researched, scored and gate-checked by Upshift's commercial engine — market data, competitor pricing and demand evidence all verified before it earned a build slot. The kit itself is engineered and QA'd by hand against the same contract the engine validated.