Generate a hardened MCP config

Pick the servers you want. Get a starting config that follows the security basics: scoped paths, secrets in environment variables, https with auth, and a reminder to pin versions.

🔒 Runs 100% in your browser. Nothing is uploaded.

Filesystem

Local file access, scoped to one project directory.

GitHub

Token referenced from an environment variable, never inlined.

Postgres

Connection string from an environment variable.

Web fetch

Fetches URLs. The highest-risk server. Prefer an SSRF-safe fetch (see the kit).

Your remote server (HTTP)

https only, with a bearer token from an environment variable.

Slack

Bot token and team id from environment variables.

Memory

Local knowledge graph. No secrets, no network.

Building your own MCP server?

A generated config is a safe starting point for off-the-shelf servers. If you are writing your own, MCP Forge Kit gives you a secure-by-default base: bearer and JWT auth, an SSRF-safe fetch, rate limiting, input validation, tests, and CI.

Get MCP Forge Kit, €39

Generated a config? Run it through the scanner to confirm it scores well. New to MCP security? Read the checklist.