Create-MCP
CLI tool and scaffolding generator that creates/extents production-ready Model Context Protocol (MCP) server projects (TypeScript) with prebuilt tools/resources/prompts and test workflows, plus commands to add additional components (tools, resources, prompts, services, transports, utils) to existing projects.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
TLS/auth only described at a high level for generated HTTP transport (including a flag to enable OAuth and a flag to disable DNS rebinding protection). No details are provided about TLS enforcement, CSRF/session handling, token storage, or logging. The npm manifest lists common CLI dependencies but does not provide vulnerability status or pinned versions in the provided data.
⚡ Reliability
Use Cases
- • Generate a starter MCP server quickly with an opinionated clean architecture template
- • Learn MCP server best practices via a cohesive example that demonstrates multiple MCP capabilities
- • Extend an existing MCP server with new tools/resources/prompts/transports safely with validation and backup/rollback
- • Run integrated testing using MCP Inspector in HTTP/stdio modes (as described by generated scripts)
Not For
- • Building a hosted SaaS API endpoint (this is a local generator/scaffolder)
- • Production use without reviewing generated code and dependencies
- • Environments that require a fixed, backward-compatible MCP server contract without template updates
Interface
Authentication
Authentication is described as an option for HTTP transport in generated projects (e.g., --oauth). No explicit scope model or auth details are provided in the README excerpt.
Pricing
As an npm CLI/package, cost is not described; assumes standard developer environment and dependency install costs only.
Agent Metadata
Known Gotchas
- ⚠ This is primarily a project generator; an agent must run the CLI locally (or in a workspace) to obtain the MCP server artifacts.
- ⚠ Generated projects may introduce multiple transports; agents should ensure the correct mode is tested (stdio vs HTTP vs oauth).
- ⚠ Component naming validation/conflict detection is mentioned; automation should handle validation failures gracefully.
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for Create-MCP.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-04-04.