zenvx-mcp
Provides tools for the Notion MCP connector to list directories, read/write files, and optionally run shell commands on the server.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@zenvx-mcplist the files in my project directory"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
zenvx-mcp
Secure self-hosted remote MCP server — Python (FastMCP, streamable HTTP) behind a Cloudflare Tunnel with bearer-token auth. Zero inbound ports.
Live endpoint: https://mcp.zenvx.in/mcp (Bearer token required)
Architecture
MCP client → Cloudflare (TLS + WAF) → cloudflared tunnel → 127.0.0.1:8765 → laptopRelated MCP server: MCP Access OAuth Server
Tools
Tool | Description |
| Health check |
| List a directory under the sandbox root |
| Windowed text-file read (offset/limit) |
| Write or append UTF-8 files (logged) |
| Full shell access — OFF unless |
Security model
Cloudflare Tunnel — outbound-only; no open inbound ports; TLS + DDoS protection free
Bearer token — every request must carry
Authorization: Bearer <token>(openssl rand -hex 32)Cloudflare Access (recommended) — Zero Trust policy at the edge, so a leaked token alone is useless
Sandbox root — file tools cannot escape
MCP_FS_ROOTNon-root systemd user — unit hardening:
NoNewPrivileges,PrivateTmp,ProtectSystem
Repo layout
File | Purpose |
| MCP server (FastMCP + bearer-auth middleware) |
|
|
| Tunnel ingress: |
| systemd unit |
| Env template — copy to |
| Full setup guide: venv → token → systemd → tunnel → Access → clients |
Quick start
python3 -m venv .venv && .venv/bin/pip install -r requirements.txt
export MCP_AUTH_TOKEN=$(openssl rand -hex 32)
python server.py # serves 127.0.0.1:8765/mcp — front it with cloudflared, never bind 0.0.0.0Full instructions, Cloudflare Tunnel/Access steps, client configs (Claude Desktop, Notion MCP connector, MCP Inspector), and the Windows variant: SETUP.md
This server cannot be deployed
Maintenance
Related MCP Connectors
Remote MCP server for supportsheep: run AI interviews and manage support content for your blog.
Cloud-hosted MCP server for URnetwork VPN and Proxy
Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).
Coupler.io remote MCP server
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceRemote MCP server with built-in OAuth authentication via Cloudflare Access, enabling secure tool usage like math and image generation with user-based access control.-
- FlicenseNot gradedqualityDmaintenanceRemote MCP server with built-in OAuth authentication via Cloudflare Access, enabling secure tool invocation after user sign-in.-
- FlicenseNot gradedqualityDmaintenanceSelf-hosted MCP server for administering Cloudflare DNS and cloudflared tunnels, enabling exposure of SSH hosts and web services with Google OAuth access control.3-
- FlicenseNot gradedqualityCmaintenanceRemote MCP server with built-in OAuth authentication via Cloudflare Access, enabling secure tool access and user identity-based restrictions.-