mcp.andreglegg.no
Uses Cloudflare Tunnel to expose the MCP host publicly, and Cloudflare Access service token authentication for one of its routes.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
mcp.andreglegg.no
Remote MCP tool host. Serves my own tools over Streamable HTTP so any MCP client can use them without a local install.
Route | Auth | Tools |
| none |
|
| Cloudflare Access service token |
|
| none | artifact downloads, 30 min TTL |
Use it
claude mcp add --transport http treegen https://mcp.andreglegg.no/treegenTools return a short-lived download URL rather than the file itself — a detail-2 tree GLB is ~664 KB, which has no business inside a model's context window.
Related MCP server: mcp-factory
Run locally
npm install
npm test
PUBLIC_BASE_URL=http://localhost:8787 npm startEnvironment: PORT (default 8787), ARTIFACT_DIR, PUBLIC_BASE_URL.
Architecture
Design and rationale — including why Cloudflare Workers was rejected and why
binaries are never returned inline — live in
docs/superpowers/specs/2026-08-03-mcp-subdomain-design.md.
The host runs on a self-hosted Windows machine behind a free Cloudflare Tunnel, so the public endpoint is only up when that machine is.
Adding a tool
Write
src/tools/<name>/index.jsexportingregister<Name>Tools(server, { store }).Add it to the route's array in
src/registry.js. That's the only file that changes.Return
store.put(bytes, ext)'s URL — never raw bytes.
Deploying to a host machine
The scripts take paths as parameters and default to the current user's profile, so nothing here is tied to a particular machine.
First-time setup, from the checkout directory:
npm ci --omit=dev
powershell -File install.ps1install.ps1 registers mcp-host as a Scheduled Task at boot. The Node path is
absolute inside it because the task runs as SYSTEM, whose PATH excludes the
Node install directory; a bare node there fails with 0x80070002 while the
task still reports Ready and nothing listens.
The tunnel. cloudflared tunnel login needs a browser and cannot be
scripted. It can run on any machine, with the resulting credentials JSON copied
to the host:
cloudflared tunnel login # writes cert.pem
cloudflared tunnel create <tunnel-name> # writes <UUID>.json
cloudflared tunnel route dns <tunnel-name> mcp.andreglegg.noThen on the host machine, copy <UUID>.json into the cloudflared directory,
copy tunnel/config.example.yml to config.yml there and fill in the tunnel
UUID, and run:
powershell -File install-tunnel.ps1Do not use cloudflared service install. On Windows it registers the
service with no arguments and drops the --config flag, so the service runs as
LocalSystem, finds no config, and sits there connecting to nothing while
reporting RUNNING. Copying the config into the LocalSystem profile does not fix
it either. The scheduled task in install-tunnel.ps1 pins the full command line
and works.
Redeploying after a push — run update.ps1 on the host machine:
powershell -File update.ps1
This server cannot be deployed
Maintenance
Related MCP Connectors
Remote MCP that generates original launch assets over Streamable HTTP. Usage is metered in credits.
Remote MCP server exposing SMI Aware tools, resources, and skills over Streamable HTTP.
Streamable HTTP MCP gateway for NV oOS fleets — one API key, namespaced tools, quotas and policy.
Trust, freshness, policy, and discovery layer for public MCP servers.
Related MCP Servers
- FlicenseAqualityDmaintenanceUniversal MCP proxy server that discovers, searches, and executes tools across all configured MCP servers from a single entry point.7-
- AlicenseBqualityBmaintenanceManifest-driven MCP server scaffolder and runtime hub for tool integrations.1MIT
- AlicenseNot gradedqualityDmaintenanceA hosted remote MCP server that provides tool deprecation checking, replacement suggestions, and receipt issuance for MCP tools.MIT
- FlicenseNot gradedqualityBmaintenanceEnables developers to build MCP servers with registry-managed tool metadata, runtime hot-reloading, pluggable authentication and authorization, per-audience tool views, and resilient stateless operation.-