Generate a safe MCP server
Describe your tools and get a ready-to-use secure-by-default TypeScript server — validated inputs (zod), egress allow-list, secrets via environment, annotated side effects. Everything runs in your browser. You only implement each tool's business logic.
✨ Want a real AI generator? The MCP Copilot writes a full server from a plain-English description — powered by the Claude API, applying the 10 secure-by-default rules. TypeScript or Python, downloadable as a .zip.
The scaffolder below stays 100% offline (no connection needed). The AI Copilot needs a free creator account — which is also what enables the behavioral pentest afterwards.
Open the AI Copilot →Empty = no network access generated (least privilege). Otherwise a strict allow-list is added.
Parameters: name:type comma-separated; suffix ? = optional. Types: string, number, boolean, enum[a|b|c]. E.g. city:string, unit:enum[c|f]?