@agentailor/create-mcp-server 0.5.1 → 0.5.3

package/dist/templates/common/env.example.js

@@ -1,5 +1,12 @@
 export function getEnvExampleTemplate(options) {
     const withOAuth = options?.withOAuth ?? false;
+    const isSdk = options?.framework === 'sdk' || !options?.framework;
+    const allowedHostsVar = isSdk
+        ? `
+# Comma-separated list of additional allowed hosts (for deployment behind reverse proxies)
+# ALLOWED_HOSTS=my-server.example.com,my-server.us-central1.run.app
+`
+        : '';
     const oauthVars = withOAuth
         ? `
 # OAuth Configuration
@@ -15,5 +22,5 @@ OAUTH_AUDIENCE=https://your-mcp-server.com
 `
         : '';
     return `PORT=3000
-${oauthVars}`;
+${allowedHostsVar}${oauthVars}`;
 }

package/dist/templates/common/package.json.js

@@ -5,15 +5,15 @@ export function getPackageJsonTemplate(projectName, options) {
     let devDependencies;
     const commonDevDependencies = {
         typescript: '^5.9.3',
-        '@modelcontextprotocol/inspector': '^0.18.0',
-        '@types/node': '^25.0.3',
+        '@modelcontextprotocol/inspector': '^0.20.0',
+        '@types/node': '^25.3.0',
     };
-    const zodDependency = { zod: '^4.3.5' };
-    const dotEnvDependency = { dotenv: '^17.2.3' };
+    const zodDependency = { zod: '^4.3.6' };
+    const dotEnvDependency = { dotenv: '^17.3.1' };
     if (framework === 'fastmcp') {
         // FastMCP dependencies - simpler setup
         dependencies = {
-            fastmcp: '^3.26.8',
+            fastmcp: '^3.33.0',
             ...zodDependency,
             ...dotEnvDependency,
         };
@@ -24,7 +24,7 @@ export function getPackageJsonTemplate(projectName, options) {
     else {
         // Official SDK dependencies
         dependencies = {
-            '@modelcontextprotocol/sdk': '^1.25.1',
+            '@modelcontextprotocol/sdk': '^1.26.0',
             express: '^5.2.1',
             ...zodDependency,
             ...dotEnvDependency,

package/dist/templates/common/templates.test.js

@@ -89,5 +89,17 @@ describe('common templates', () => {
             const template = getEnvExampleTemplate();
             expect(template).toContain('PORT=');
         });
+        it('should include ALLOWED_HOSTS hint for SDK framework', () => {
+            const template = getEnvExampleTemplate({ framework: 'sdk' });
+            expect(template).toContain('ALLOWED_HOSTS');
+        });
+        it('should include ALLOWED_HOSTS hint by default (no framework specified)', () => {
+            const template = getEnvExampleTemplate();
+            expect(template).toContain('ALLOWED_HOSTS');
+        });
+        it('should NOT include ALLOWED_HOSTS for FastMCP framework', () => {
+            const template = getEnvExampleTemplate({ framework: 'fastmcp' });
+            expect(template).not.toContain('ALLOWED_HOSTS');
+        });
     });
 });

package/dist/templates/sdk/stateful/index.js

@@ -14,13 +14,18 @@ import {
   getOAuthMetadataUrl,
   validateOAuthConfig,
 } from './auth.js';`
-        : `import { type Request, type Response } from 'express';
+        : `import 'dotenv/config';
+import { type Request, type Response } from 'express';
 import { randomUUID } from 'node:crypto';
 import { createMcpExpressApp } from '@modelcontextprotocol/sdk/server/express.js';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
 import { getServer } from './server.js';`;
-    const appSetup = `const app = createMcpExpressApp();
+    const appSetup = `const allowedHosts = process.env.ALLOWED_HOSTS?.split(',') ?? [];
+
+const app = createMcpExpressApp({
+  allowedHosts: ['localhost', '127.0.0.1', '[::1]', ...allowedHosts],
+});
 
 // Health check endpoint for container orchestration
 app.get('/health', (_, res) => res.sendStatus(200));`;

package/dist/templates/sdk/stateful/readme.js

@@ -133,7 +133,7 @@ ${commands.build}
 ${commands.start}
 \`\`\`
 
-The server will start on port 3000 by default. You can change this by setting the \`PORT\` environment variable.
+The server will start on port 3000 by default. You can change this by setting the \`PORT\` environment variable. To allow additional hosts (e.g. when deploying behind a reverse proxy), set \`ALLOWED_HOSTS\` as a comma-separated list.
 
 ## Testing with MCP Inspector
 

package/dist/templates/sdk/stateful/templates.test.js

@@ -36,7 +36,7 @@ describe('sdk/stateful templates', () => {
         it('should use createMcpExpressApp', () => {
             const template = getIndexTemplate();
             expect(template).toContain('createMcpExpressApp');
-            expect(template).toContain('const app = createMcpExpressApp()');
+            expect(template).toContain('const app = createMcpExpressApp({');
         });
         it('should configure /mcp endpoint', () => {
             const template = getIndexTemplate();
@@ -46,7 +46,12 @@ describe('sdk/stateful templates', () => {
         });
         it('should use PORT from environment variable', () => {
             const template = getIndexTemplate();
-            expect(template).toContain('process.env.PORT || 3000');
+            expect(template).toContain('process.env.PORT');
+        });
+        it('should pass allowedHosts to createMcpExpressApp', () => {
+            const template = getIndexTemplate();
+            expect(template).toContain('allowedHosts');
+            expect(template).toContain("ALLOWED_HOSTS?.split(',')");
         });
         // Stateful-specific tests
         it('should use session ID header', () => {

package/dist/templates/sdk/stateless/index.js

@@ -7,7 +7,11 @@ import { createMcpExpressApp } from '@modelcontextprotocol/sdk/server/express.js
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { getServer } from './server.js';
 
-const app = createMcpExpressApp();
+const allowedHosts = process.env.ALLOWED_HOSTS?.split(',') ?? [];
+
+const app = createMcpExpressApp({
+  allowedHosts: ['localhost', '127.0.0.1', '[::1]', ...allowedHosts],
+});
 
 // Health check endpoint for container orchestration
 app.get('/health', (_, res) => res.sendStatus(200));

package/dist/templates/sdk/stateless/readme.js

@@ -45,7 +45,7 @@ ${commands.build}
 ${commands.start}
 \`\`\`
 
-The server will start on port 3000 by default. You can change this by setting the \`PORT\` environment variable.
+The server will start on port 3000 by default. You can change this by setting the \`PORT\` environment variable. To allow additional hosts (e.g. when deploying behind a reverse proxy), set \`ALLOWED_HOSTS\` as a comma-separated list.
 
 ## Testing with MCP Inspector
 

package/dist/templates/sdk/stateless/templates.test.js

@@ -36,7 +36,7 @@ describe('sdk/stateless templates', () => {
         it('should use createMcpExpressApp', () => {
             const template = getIndexTemplate();
             expect(template).toContain('createMcpExpressApp');
-            expect(template).toContain('const app = createMcpExpressApp()');
+            expect(template).toContain('const app = createMcpExpressApp({');
         });
         it('should configure /mcp endpoint', () => {
             const template = getIndexTemplate();
@@ -46,7 +46,12 @@ describe('sdk/stateless templates', () => {
         });
         it('should use PORT from environment variable', () => {
             const template = getIndexTemplate();
-            expect(template).toContain('process.env.PORT || 3000');
+            expect(template).toContain('process.env.PORT');
+        });
+        it('should pass allowedHosts to createMcpExpressApp', () => {
+            const template = getIndexTemplate();
+            expect(template).toContain('allowedHosts');
+            expect(template).toContain("ALLOWED_HOSTS?.split(',')");
         });
         // Stateless-specific tests
         it('should use undefined sessionIdGenerator for stateless mode', () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentailor/create-mcp-server",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "Create a new MCP (Model Context Protocol) server project",
   "type": "module",
   "bin": {