mcp-bubble-wrap
Verified Safeby aharvard
Overview
Provides an interactive bubble wrap simulator as an MCP (Model Context Protocol) widget, compatible with OpenAI Apps SDK and native MCP Apps.
Installation
pnpm startEnvironment Variables
- BASE_URL
- PORT
- NODE_ENV
Security Notes
The server uses CORS with an allow-all origin ('*') which, while common for development and embeddable widgets, could be a minor concern in certain production scenarios if not properly restricted or understood. The widget also uses `window.parent.postMessage` with a wildcard target origin ('*'), which is standard for iframe communication but relies on a secure host to validate incoming messages. Content Security Policy (CSP) is explicitly defined, which is a good security practice. No hardcoded secrets or malicious patterns were identified.
Similar Servers
inspector
An interactive developer tool for testing, debugging, and monitoring MCP (Model Context Protocol) servers, including their tools, prompts, resources, and UI widgets.
mcp-gpt-proxy
Enhances existing Model Context Protocol (MCP) servers with OpenAI GPT Apps SDK UI widgets for ChatGPT without modifying the original server.
openai-apps-template
This server provides a Model Context Protocol (MCP) backend for a responsive React-based todo list widget that can be embedded and interacted with inside ChatGPT.
openai-app-starter
A starter template for building OpenAI Apps that expose custom HTML or React widgets via an MCP server, demonstrating end-to-end workflow and best practices.