# Public MCP server (no auth)
npm create cloudflare@latest -- my-mcp-server \
  --template=cloudflare/ai/demos/remote-mcp-authless

# OAuth-protected MCP server
npm create cloudflare@latest -- my-mcp-server \
  --template=cloudflare/ai/demos/remote-mcp-github-oauth

import { MCPServer } from '@anthropic-ai/mcp-server';
import { z } from 'zod';

const server = new MCPServer({ name: 'my-server', version: '1.0.0' });

server.tool(
  'query-database',
  'Query the database',
  {
    query: z.string().describe('SQL query to execute'),
    limit: z.number().optional().describe('Max results')
  },
  async ({ query, limit = 10 }, env) => {
    const { results } = await env.DB.prepare(query).bind(limit).all();

    return {
      content: [{
        type: 'text',
        text: JSON.stringify(results, null, 2)
      }]
    };
  }
);

export default {
  async fetch(request: Request, env: Env): Promise<Response> {
    return server.handle(request, env);
  }
};

# Deploy to Workers
wrangler deploy

# Test locally
npx @anthropic-ai/mcp-inspector

{
  "mcpServers": {
    "my-server": {
      "url": "https://my-mcp-server.workers.dev/sse"
    }
  }
}

[vars]
OAUTH_PROVIDER = "github"
OAUTH_CLIENT_ID = "your-client-id"
# OAUTH_CLIENT_SECRET set via: wrangler secret put OAUTH_CLIENT_SECRET