Skip to main content
Glama
wazobiatech

wazobiatech-nexus-mcp

Official
by wazobiatech

wazobiatech-nexus-mcp

Python SDK for the Nexus MCP ecosystem. Provides HMAC signing/verification and MCP server scaffolding.

Installation

pip install wazobiatech-nexus-mcp==1.0.0

Related MCP server: MCP Security Framework

Usage

HMAC Signing

from nexus_mcp.hmac_utils import sign_request

sig, ts = sign_request("GET", "/mcp/manifest", "my-secret")
print("x-signature:", sig)
print("x-timestamp:", ts)

HMAC Middleware (FastAPI)

from fastapi import FastAPI
from nexus_mcp.middleware import HMACMiddleware

app = FastAPI()
app.add_middleware(HMACMiddleware, hmac_secret="my-secret")

MCP Server

from nexus_mcp.server import create_mcp_server
from nexus_mcp.models import Manifest

app = create_mcp_server(
    port=8000,
    hmac_secret="my-secret",
    manifest=Manifest(...),
    tools=[...],
)

# Start with uvicorn
# uvicorn.run(app, host="0.0.0.0", port=8000)

Testing

poetry install
poetry run pytest

Contract vector tests verify every entry from nexus-mcp-contract/vectors.json.

License

MIT

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    A production middleware toolkit for MCP servers providing auth, health checks, graceful shutdown, and transport ergonomics, enabling rapid development of robust MCP servers.
    10 npm
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables creation of secure-by-default MCP servers with 5-layer validation to protect against injection, path traversal, and other attack vectors.
    7
    918 npm
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides a sovereign, MIT-licensed MCP server for professional-service workflows, running entirely on your infrastructure with Ed25519 cryptographic signing for every action.
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables developers to build MCP servers with registry-managed tool metadata, runtime hot-reloading, pluggable authentication and authorization, per-audience tool views, and resilient stateless operation.
    -