Back to Home
wei icon

mymlh-mcp-server

Verified Safe

by wei

Overview

Provides secure, OAuth-authenticated access to MyMLH API data for AI assistants and Model Context Protocol (MCP) clients.

Installation

Run Command
npm run dev

Environment Variables

  • MYMLH_CLIENT_ID
  • MYMLH_CLIENT_SECRET
  • COOKIE_ENCRYPTION_KEY

Security Notes

The server leverages Cloudflare Workers for isolated execution and managed infrastructure. OAuth implementation uses the `@cloudflare/workers-oauth-provider` library, a dedicated solution for OAuth on Workers. Sensitive data (access/refresh tokens) is securely managed within the `McpAgent`'s state. Cookie handling for OAuth approval is correctly implemented with HMAC-SHA256 signing and HTML sanitization to prevent XSS. Required secrets (`MYMLH_CLIENT_ID`, `MYMLH_CLIENT_SECRET`, `COOKIE_ENCRYPTION_KEY`) are clearly identified and designed for secure environment variable injection, not hardcoded. No 'eval' or other obvious malicious patterns were found in the provided source code.

Similar Servers

Stats

Interest Score37
Security Score9
Cost ClassLow
Stars7
Forks1
Last Update2025-12-08

Tags

MCPMyMLHOAuthCloudflare WorkersAI Assistants