Mcp Worker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Worker (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The simplest way to run a stateless MCP server on Cloudflare Workers. Uses createMcpHandler from the Agents SDK to handle all MCP protocol details in one line.
McpServer into a Worker-compatible fetch handlerMcpServer, pass it to createMcpHandler, donenpm install
npm run devOpen the browser to see the built-in tool tester, or connect with the MCP Inspector at http://localhost:5173/mcp.
import { createMcpHandler } from "agents/mcp";
import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
import { z } from "zod";
function createServer() {
const server = new McpServer({ name: "Hello MCP Server", version: "1.0.0" });
server.registerTool(
"hello",
{
description: "Returns a greeting",
inputSchema: { name: z.string().optional() }
},
async ({ name }) => ({
content: [{ type: "text", text: `Hello, ${name ?? "World"}!` }]
})
);
return server;
}
export default {
fetch: async (request, env, ctx) => {
const server = createServer();
return createMcpHandler(server)(request, env, ctx);
}
};mcp — stateful MCP server with McpAgent and Durable Objectsmcp-worker-authenticated — adding OAuth authenticationmcp-client — connecting to MCP servers as a client~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.