MCP-Nest
NestJS module for building MCP servers that expose AI tools, resources, and prompts. Provides decorator-based API (@Tool, @Resource, @Prompt) with full NestJS dependency injection, multiple transport support (HTTP+SSE, Streamable HTTP, STDIO), Zod schema validation, per-tool authorization, and an optional built-in OAuth authorization server.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
Enterprise-grade auth with OAuth, per-tool authorization, and external IDP integration. Built-in auth server is beta. Zod validation prevents injection. NestJS security patterns apply.
⚡ Reliability
Best When
You already use NestJS and want to expose your services as MCP tools with enterprise-grade auth, validation, and dependency injection.
Avoid When
You don't use NestJS, need a lightweight MCP server, or work in Python/Go ecosystems.
Use Cases
- • Building MCP servers within existing NestJS applications using familiar decorators and DI
- • Exposing enterprise services as AI-callable tools with per-tool authorization and OAuth
- • Creating MCP-compatible resources and prompt templates for LLM consumption
- • Integrating MCP protocol into TypeScript/NestJS microservice architectures
Not For
- • Non-NestJS/non-TypeScript projects
- • Simple single-tool MCP servers where NestJS overhead is unnecessary
- • Python or Go MCP server implementations
Interface
Authentication
Guard-based authentication with OAuth support. Built-in authorization server (beta) using TypeORM. External authorization server integration compatible with Keycloak and Auth0. Per-tool authorization granularity.
Pricing
Free open-source NestJS module.
Agent Metadata
Known Gotchas
- ⚠ Requires NestJS ecosystem — not usable outside TypeScript/NestJS applications
- ⚠ Built-in authorization server is in beta — not production-ready
- ⚠ Zod v4 required — may conflict with projects using Zod v3
- ⚠ Multiple transport modes (SSE, Streamable HTTP, STDIO) need explicit configuration
- ⚠ Interactive elicitation feature may not work with all MCP clients
- ⚠ TypeORM optional dependency adds complexity if using built-in auth server
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for MCP-Nest.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-03-08.