Other MCP Server

MCP Fusion

Name: MCP Fusion
Author: vinkius-labs

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

Scan found nothing by vinkius-labs207Apache-2.0TypeScriptIntermediatestdio

View on GitHub Install Guide

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Safety Report

63% Scan found nothing

Scanned 5 months ago

5 passed 3 warnings

Security

Authentication

details

Authentication detected: env_api_key, bearer_check, auth_header, auth_middleware, connection_string, oauth

Pass

CORS Policy

details

Uses SSE/HTTP transport but no CORS configuration found

Warning

Rate Limiting

details

Rate limiting detected: rate_limit_middleware

Pass

Known CVEs

details

No known CVEs in dependencies

Pass

Code Quality

Dependency Audit

details

No known vulnerable dependencies detected

Pass

Dangerous Patterns

details

Dangerous patterns detected: eval_call

Warning

License

details

License: Apache-2.0

Pass

Community

Maintenance Status

details

Last commit 5 months ago

Warning

Learn about our security methodology →

Frequently Asked Questions

What is MCP Fusion?

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

Is MCP Fusion safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone MCP Fusion and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. None of them matched. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to MCP Fusion?

Similar MCP servers include FastMCP, Oh My Posh Validator, Claude Flow. Each serves a similar purpose but may differ in features, language, and compatibility.