MCP Kit · TypeScript starter kit
MCP Server Production Kit
The production layer every MCP server needs — OAuth, rate limits, evals & Cloudflare deploy in one kit.
15,930+ MCP servers exist and the tutorials all stop at hello-world. The hard part — the part security review and real clients demand — is auth, rate limiting, observability and tests. This kit is that production layer: OAuth 2.1 middleware, per-tool rate limits, structured logging, schema validation, an eval harness that exercises your tools the way an agent actually calls them, CI config, and a one-command Cloudflare Workers deploy. The MCP spec shipped a new release candidate this week; the kit ships with 12 months of updates so spec churn is our problem, not yours. Ships today with its agent-behavior evals passing 6/6 at packaging. Picks and shovels for the AI gold rush: it pays off whichever server wins.
Built for: TypeScript developers and teams shipping MCP servers that must pass security review
- OAuth 2.1 auth middleware, wired and documented
- Per-tool rate limiting and structured logging
- Tool schema validation with typed registry
- Agent-behavior eval harness — not just unit tests
- One-command Cloudflare Workers deploy + CI config
- 12 months of updates against an actively churning spec
- Hand-written TypeScript, framework-free core
Pick your license
Solo
One developer, unlimited servers.
$79
- The full kit
- OAuth 2.1 + rate limiting + evals
- Cloudflare deploy + CI
- 12 months of updates
One developer's own projects.
Team
Your whole team ships with it.
$149
- Everything in Solo
- Team-wide license
- Priority email support
One team, internal and client servers.
Agency
Unlimited client work.
$349
- Everything in Team
- Unlimited client servers
- Source design files where provided
Unlimited client projects.
14-day money-back guarantee — if the kit doesn't fit your stack, reply to your receipt within 14 days and we refund it in full. Keep nothing, owe nothing.
More from the store
Agent Skill Production Kit
The review layer every publishable Claude Code skill needs — validate, scan, ship.
AI Usage Billing Kit
Credits that can't double-spend, caps that hold, and margin you can actually see.
AI Voice Receptionist Kit
Answer every call for your clients — on your own keys, at your own margin.
Questions
What exactly do I get?
An instant download: the full TypeScript kit (typed tool registry, OAuth 2.1 resource-server auth, KV sliding-window rate limits, structured logging, two example tools), the agent-behavior eval harness, CI config, wrangler config for one-command Cloudflare deploy, real docs, and 12 months of kit updates from your library link. npm test runs typecheck plus the evals — 6/6 at packaging.
Why not just use a free boilerplate?
The leading free Cloudflare boilerplate is unmaintained open source, and the MCP spec is moving — a new release candidate shipped in late July 2026 alone. This kit pairs the production layer (OAuth 2.1, limits, logging, evals) with 12 months of updates, so your server tracks the spec instead of rotting with it.
How is this different from other paid kits?
The paid kits we surveyed target AWS or Vercel and ship unit tests. This one targets Cloudflare Workers with OAuth 2.1 and adds an agent-behavior eval harness — tests that call your tools the way an agent does. That combination didn't exist in our survey.
Was this scoped by AI?
The niche was researched, scored and gate-checked by Upshift's commercial engine — market data, competitor pricing and demand evidence all verified before it earned a build slot. The kit itself is engineered and QA'd by hand against the same contract the engine validated.