secureflow-mcp

[](https://www.typescriptlang.org/) [](./LICENSE) [](https://github.com/BarakMozesPro/secureflow-mcp/actions/workflows/ci.yml)

A full-featured implementation of the Model Context Protocol (MCP) in TypeScript — enabling AI agents to discover and invoke tools, access resources, and use prompt templates through a type-safe, multi-transport server framework.

---

graph TD
    A[AI Agent] --> B[MCP Client]
    B --> C[Transport Layer]
    C --> D[MCP Server]
    D --> E[Tool Registry]
    E --> F[Security Tools]
    E --> G[Resource Providers]
    E --> H[Prompt Templates]
    C --> I[SSE]
    C --> J[HTTP / Streamable]
    C --> K[stdio]
    C --> L[WebSocket]

---

• Full MCP protocol implementation — type-safe message handling with Zod-validated spec types
• Multi-transport client — SSE, stdio, Streamable HTTP, and WebSocket transports
• Server framework — McpServer with declarative tool, resource, and prompt registration
• OAuth2 authentication — complete client-side OAuth2 flow with PKCE support
• Middleware adapters — Express, Hono, and Node.js HTTP middleware out of the box
• Session management — stateful HTTP transport with per-session event streams
• Comprehensive test suite — 23K+ LOC covering unit and integration scenarios

---

# Install dependencies
pnpm install

# Build all packages
pnpm build:all

# Run tests
pnpm test:all

---

import { McpServer } from "@secureflow/mcp-server";
import { z } from "zod";

const server = new McpServer({
  name: "secureflow-tools",
  version: "1.0.0",
});

// Register a security scan tool
server.register