🛡️ Windows Scoped Remote MCP Server

This is a security-isolated remote development MCP (Model Context Protocol) server that runs in Windows environments.
By integrating with modern LLM clients such as ChatGPT and Claude, it can autonomously perform file creation/editing, PowerShell command execution, project builds, and debugging within a designated local workspace using conversation alone.

📌 Key Features

• Windows-optimized sandbox (SandboxGuard):

  • Blocks 100% of file/folder access and command execution outside the specified MCP_WORKSPACE_ROOT directory.

• ChatGPT standard OAuth 2.1 integration (RFC 8414 / RFC 9728 / DCR / PKCE):

  • Provides dynamic client registration (DCR) and an interactive secure approval page (/authorize), so only authorized users who know the password token (MCP_AUTH_TOKEN) can connect safely.

• 19 full-stack MCP development tools & OpenAPI 3.0 spec included:

  • Full support for file and directory CRUD, patch application (apply_patch), asynchronous process and PowerShell/CMD execution, and status monitoring.

• Cloudflare Tunnel-based Zero Trust communication:

  • Provides a secure HTTPS endpoint through Cloudflare Tunnel without complex port forwarding or firewall openings.

• Zero-downtime project switching support:

  • Simply change MCP_WORKSPACE_ROOT in .env to instantly switch working folders while maintaining the existing ChatGPT authentication session.

🏗️ System Architecture

┌────────────────────────────────────────────────────────┐
│                   ChatGPT (Web / App)                  │
└───────────────────────────┬────────────────────────────┘
                            │ HTTPS (Streamable HTTP / OAuth 2.1)
                            ▼
┌────────────────────────────────────────────────────────┐
│        Cloudflare Zero Trust Tunnel (mcp.yourdomain)   │
└───────────────────────────┬────────────────────────────┘
                            │ Local Proxy (HTTP localhost:<MCP_PORT>)
                            ▼
┌────────────────────────────────────────────────────────┐
│            Windows Scoped Remote MCP Server            │
│  ┌──────────────────────────────────────────────────┐  │
│  │ Express Router (/mcp, /authorize, /openapi.json) │  │
│  └────────────────────────┬─────────────────────────┘  │
│                           │                            │
│  ┌────────────────────────▼─────────────────────────┐  │
│  │   SandboxGuard & ProcessManager & FileService    │  │
│  └────────────────────────┬─────────────────────────┘  │
└───────────────────────────┼────────────────────────────┘
                            │ 격리된 파일 & 명령어 실행
                            ▼
┌────────────────────────────────────────────────────────┐
│       내 로컬 작업 공간 (MCP_WORKSPACE_ROOT)            │
│      예: D:\Godot\mcp-test 또는 D:\Godot\MyGame         │
└────────────────────────────────────────────────────────┘

🛠️ Provided Tool List (30 Tools Total)

🌐 1. Browser Automation & Web Testing Tools (Playwright 8 Tools)

📂 2. Multi-Workspace Management Tools (3 Tools)

📁 3. File and Code Manipulation Tools (11 Tools)

⚡ 4. Terminal Command and Script Execution Tools (8 Tools)

⚙️ 1. Environment Configuration Guide (.env)

Copy the .env.example file in the project root to create a .env file, then configure it:

copy .env.example .env

📋 Detailed Description of Key Configuration Items

# [Server Port]
MCP_PORT=12000

# [Multi-Root Security & Directory Sandbox]
MCP_WORKSPACE_ROOTS=test:C:\path\to\mcp-test, ether:C:\path\to\ether-chronicle, server:C:\path\to\localRemoteMcp

# [Authentication - ChatGPT OAuth 2.1]
MCP_AUTH_TOKEN=your_secure_password_here

# [Public Domain & Cloudflare Tunnel]
MCP_PUBLIC_URL=https://mcp.yourdomain.com
CLOUDFLARE_TUNNEL_TOKEN=your_cloudflare_tunnel_token_here

# [Shell Configuration]
MCP_DEFAULT_SHELL=powershell

# [Limits - Safety Guardrails]
MCP_MAX_FILE_CHUNK_BYTES=1048576
MCP_MAX_EDIT_FILE_BYTES=67108864
MCP_MAX_OUTPUT_BYTES=1048576

🌐 2. Cloudflare Tunnel and Domain Integration

This server securely exposes the local port specified in .env (MCP_PORT, default: 12000) to a subdomain of your domain (https://mcp.yourdomain.com) through a Cloudflare Zero Trust tunnel.

🔌 Cloudflare Dashboard Setup

1. Go to Cloudflare Zero Trust Dashboard ➔ Networks ➔ Tunnels menu.

2. Click [Create a tunnel] to create a Cloudflared tunnel.

3. Add a Public Hostname:

   • Subdomain: mcp (or your desired subdomain)

   • Domain: yourdomain.com (select your domain)

   • Service Type: HTTP

   • URL: localhost:<MCP_PORT> (e.g., localhost:12000)

4. Copy the issued tunnel token and paste it into the CLOUDFLARE_TUNNEL_TOKEN field in .env.

📦 3. Cloudflare Binary (bin/cloudflared.exe) Guide

This project uses the cloudflared.exe binary to automatically start the tunnel.

• Automatic download support (recommended):

  • When start.bat or start.ps1 is first run, if bin/cloudflared.exe does not exist, the latest binary is automatically downloaded from the official Cloudflare GitHub Release and placed in the directory.

  • You only need to run start.bat — no separate download is required.

• Manual download (offline / firewall environments):

  • If automatic download is restricted, download the cloudflared-windows-amd64.exe file from the Cloudflare official release page, then rename it to bin/cloudflared.exe in the project directory.

🚀 4. How to Run the Server

Method A. One-Click Automatic Execution (start.bat / Recommended)

Double-click start.bat or run it from the console:

start.bat

(Automatically installs npm packages ➔ checks .env ➔ checks the cloudflared binary ➔ runs the TypeScript build, server, and tunnel all at once)

Method B. Manual Terminal Execution

# 1. 의존성 설치
npm install

# 2. TypeScript 컴파일
npm run build

# 3. 테스트 실행
npm test

# 4. 서버 시작
npm start

🤖 5. ChatGPT App / Plugin Connection Guide (Step by Step)

Step 1. Register the ChatGPT App

1. Go to ChatGPT Web and navigate to [Settings] ➔ [Plugins / Developer Mode].

2. Click [+ New Plugin / Create App].

3. Enter the settings as follows:

   • Name: my-remote (or your desired name)

   • Connection: Server URL ➔ https://mcp.yourdomain.com/mcp (your domain)

   • Authentication: Select OAuth

4. Click [Create].

Step 2. Secure Login Approval

1. On the registered app details screen, press the [Connect ➔] button.

2. A browser popup will show the [Windows Scoped Remote MCP Approval] web page.

3. Enter the MCP_AUTH_TOKEN value set in .env in the password field and click [Approve and return to ChatGPT].

Step 3. Permission Settings ("Allow All Actions")

• Set the Permissions option on the app details screen to Allow all actions.

• (ChatGPT will autonomously proceed with development without a confirmation popup appearing every time a tool is called)

💬 6. Real-World Conversational Development Prompt Examples

In a new chat window (or an @ plugin chat window), you can give instructions like this:

# 1. 프로젝트 파일 목록 및 구조 파악
@my-remote 현재 작업 공간의 파일과 폴더 목록을 정리해서 보여줘

# 2. 웹 게임 / 프론트엔드 프로젝트 개발
@my-remote HTML5 Canvas로 브라우저에서 실행 가능한 레트로풍 벽돌깨기 게임(breakout.html)을 세련되게 만들어줘

# 3. Godot 4 게임 스크립트 작성
@my-remote Godot 4 기준으로 2D 캐릭터 이동, 대시, 점프 및 물리 충돌을 처리하는 Player.gd를 작성해줘

# 4. 패키지 설치 및 테스트 실행
@my-remote npm install 명령어로 필요한 라이브러리를 설치하고 npm test를 돌려 결과를 확인해줘

# 5. 웹 브라우저 자동화 & 화면 캡처 (Playwright)
@my-remote 네이버(naver.com)로 이동해서 검색창에 'Godot Engine 4' 검색하고 결과 페이지 스크린샷 찍어서 search.png로 저장해줘

# 6. 내가 만든 로컬 웹페이지 실시간 검증
@my-remote 로컬 웹서버를 실행하고 브라우저로 접속해서 [게임 시작] 버튼을 누른 다음 화면이 잘 나오는지 스크린샷으로 확인해줘

📂 7. Multi-Project Management and Real-Time Switching

This server supports multi-workspaces, so you can register multiple projects at once and switch between them in real time during a conversation.

Method A. Real-Time Switching via ChatGPT Conversation (No Server Restart ⭐)

1. Check the current workspace:

   @my-remote 현재 작업 공간이 어디로 설정되어 있는지 확인해줘

2. View the list of all registered projects:

   @my-remote 등록된 모든 워크스페이스 목록을 보여줘

3. Switch workspaces immediately:

   @my-remote ether 프로젝트로 작업 공간을 전환해줘

   (ChatGPT calls the switch_workspace(name: "ether") tool to instantly switch to that project without a server restart)

Method B. Registering a New Project (.env)

1. Add a new project alias and path to MCP_WORKSPACE_ROOTS in the .env file:

   MCP_WORKSPACE_ROOTS=test:C:\path\to\mcp-test, ether:C:\path\to\ether-chronicle, mygame:C:\path\to\mygame

2. Re-run start.bat in the terminal and the added projects become immediately accessible and switchable. (The OAuth authentication token session is permanently preserved)

🔒 8. Security and Troubleshooting

• Q. Is there no risk of outsiders gaining unauthorized access to my computer?

  • It is fully protected by a 3-layer security structure:

    1. Password authentication: Only your ChatGPT account that knows the MCP_AUTH_TOKEN password can access it.

    2. Sandbox isolation: Files and commands operate only within the specified MCP_WORKSPACE_ROOT, and any access to parent paths is immediately blocked.

    3. Cloudflare Zero Trust: You can add firewall rules in the Cloudflare dashboard to allow only your IP.

• Q. What if the tunnel doesn't connect or I get a 502 error?:

  • Check that the local server (port: MCP_PORT in .env) is running properly in the start.bat window, and visit https://mcp.yourdomain.com/health in your browser to verify that the { status: "ok" } response appears.

📄 License

MIT License