Skip to content

v1.3.5 - Self-hosted Remote MCP Server

Choose a tag to compare

View all tags
@kesslerio kesslerio released this 03 Dec 06:23
v1.3.5
aa98cd4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Self-host your own remote MCP server

Use Attio from Claude.ai, ChatGPT, or any remote MCP client without relying on third-party platforms.

This release addresses Issue #928 by providing a free, self-hosted alternative to Smithery for remote OAuth MCP deployment. Deploy once to Cloudflare Workers (free tier) and access your Attio data from anywhere.

Why This Matters

  • No third-party dependencies - Your credentials stay on infrastructure you control
  • Works with any remote MCP client - Claude.ai, ChatGPT, custom integrations
  • Completely free - Cloudflare Workers free tier is more than sufficient
  • Global edge deployment - Low latency from anywhere in the world

Added

  • Full remote MCP server for Cloudflare Workers with complete JSON-RPC MCP protocol support
  • @attio-mcp/core package: Edge-compatible tool handlers that work in both local and remote environments
  • Dynamic client registration (RFC 7591) for Claude Desktop and Claude.ai OAuth
  • Encrypted token storage with AES-256-GCM in Cloudflare Workers KV

Security

  • OAuth redirect URI validation with exact hostname matching (prevents host-prefix spoofing)
  • Auth code / session token separation (prevents authorization code reuse)
  • Known MCP client allowlist: Claude.ai, ChatGPT, localhost origins

Changed

  • Renamed cloudflare-oauth-worker → cloudflare-mcp-server (now a full MCP server, not just OAuth broker)

Documentation

Full Changelog: v1.3.0...v1.3.5

Assets 2
Loading