F
licenseNot graded
qualityC
maintenanceRemote MCP server with built-in OAuth authentication via Cloudflare Access, enabling secure tool usage like math and image generation with user-based access control.
-
zenvx-mcp
Provides tools for the Notion MCP connector to list directories, read/write files, and optionally run shell commands on the server.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@zenvx-mcplist the files in my project directory"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
zenvx-mcp
Secure self-hosted remote MCP server — Python (FastMCP, streamable HTTP) behind a Cloudflare Tunnel with bearer-token auth. Zero inbound ports.
Live endpoint: https://mcp.zenvx.in/mcp (Bearer token required)
Architecture
MCP client → Cloudflare (TLS + WAF) → cloudflared tunnel → 127.0.0.1:8765 → laptopRelated MCP server: MCP Access OAuth Server
Tools
Tool | Description |
| Health check |
| List a directory under the sandbox root |
| Windowed text-file read (offset/limit) |
| Write or append UTF-8 files (logged) |
| Full shell access — OFF unless |
Security model
Cloudflare Tunnel — outbound-only; no open inbound ports; TLS + DDoS protection free
Bearer token — every request must carry
Authorization: Bearer <token>(openssl rand -hex 32)Cloudflare Access (recommended) — Zero Trust policy at the edge, so a leaked token alone is useless
Sandbox root — file tools cannot escape
MCP_FS_ROOTNon-root systemd user — unit hardening:
NoNewPrivileges,PrivateTmp,ProtectSystem
Repo layout
File | Purpose |
| MCP server (FastMCP + bearer-auth middleware) |
|
|
| Tunnel ingress: |
| systemd unit |
| Env template — copy to |
| Full setup guide: venv → token → systemd → tunnel → Access → clients |
Quick start
python3 -m venv .venv && .venv/bin/pip install -r requirements.txt
export MCP_AUTH_TOKEN=$(openssl rand -hex 32)
python server.py # serves 127.0.0.1:8765/mcp — front it with cloudflared, never bind 0.0.0.0Full instructions, Cloudflare Tunnel/Access steps, client configs (Claude Desktop, Notion MCP connector, MCP Inspector), and the Windows variant: SETUP.md
This server cannot be deployed
Maintenance
ActivityInactive
ResponsivenessNo issues
Related MCP Connectors
Remote MCP server exposing your Node Command fleet (files, shell, processes, browser) to AI hosts.
Secure and manage MCP servers through the Speakeasy AI Control Plane from your agent.
1242Remote MCP server for supportsheep: run AI interviews and manage support content for your blog.
Termalin's hosted MCP server. Claude, ChatGPT or any MCP client runs commands, moves files over SFTP, queries databases and reads server metrics and monitoring alerts on your servers, keylessly through Termalin Connectors: no SSH key is handed over and no inbound port is opened. Per-host command policy and an audit log. Needs a termal.in Pro or Team account (new accounts start with a 14-day Pro trial).
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceRemote MCP server with built-in OAuth authentication via Cloudflare Access, enabling secure tool invocation after user sign-in.-
- FlicenseNot gradedqualityFmaintenanceSelf-hosted MCP server for administering Cloudflare DNS and cloudflared tunnels, enabling exposure of SSH hosts and web services with Google OAuth access control.3-
- FlicenseNot gradedqualityCmaintenanceRemote MCP server with built-in OAuth authentication via Cloudflare Access, enabling secure tool access and user identity-based restrictions.-