"Express" matching MCP servers:

Enables scanning Express.js route surfaces for inventory and audit, classifying routes as public/authenticated.

A minimal example MCP server using Express and Clerk for authentication, exposing a streamable HTTP endpoint for MCP clients.

GCHQ CyberChef's 504 data-transformation operations as MCP tools — encryption, encoding, compression and forensics — w/ 19 analysis tools for work a single operation cannot express, such as: hash identification, RSA and ECDSA attacks, XOR key-length recovery, cipher solving, X.509 chain validation and NIST post-quantum identification (ML-KEM/ML-DSA/SLH-DSA).

A security-first MCP (Model Context Protocol) backend built with Node.js and Express, featuring hardening, rate limiting, structured logging, and Docker support.

A reference implementation of an MCP server built with Express that integrates full OAuth 2.1 authorization and RFC9728 protected resource metadata. It enables secure, authenticated communication between MCP clients and servers using streamable HTTP transport and built-in authorization flows.