
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
mcp-starter-kit
Advanced tools
Create MCP applications with authentication, database, and billing in seconds!
A universal starter kit for building Model Context Protocol (MCP) applications with built-in authentication (Kinde), database (Neon PostgreSQL), and billing systems (Kinde). Perfect for developers who want to start building MCP servers with Cursor.
# Create a new MCP application (one command!)
npx mcp-starter-kit
This will create your project and guide you through the setup process.
Note: Ignore the
npm i mcp-starter-kitcommand shown on the npm package page. Usenpx mcp-starter-kitinstead for the best experience.
| Template | Description | Entities | Perfect For |
|---|---|---|---|
| blog | Blog management system | posts, comments | Content creators, writers |
| ecommerce | E-commerce platform | products, orders, order_items | Online stores, marketplaces |
| crm | Customer relationship management | contacts, deals, tasks | Sales teams, businesses |
| todo | Simple todo system | todos | Personal productivity, task management |
npx mcp-starter-kit
What you'll see:
🚀 MCP Starter Kit
Create MCP applications with authentication, database, and billing
📝 What would you like to name your application? my-blog
📋 Choose your template:
1. blog - Blog management system (posts, comments)
2. ecommerce - E-commerce system (products, orders)
3. crm - Customer relationship management (contacts, deals, tasks)
4. todo - Simple todo management system
🎯 Enter your choice (1-4): 1
🚀 Creating my-blog with blog template...
✅ Application created successfully!
npm install
# Copy environment template
cp .env.example .env
Configure your .env file:
# Database (Get from Neon)
DATABASE_URL=postgresql://username:password@host:port/database
# Kinde Authentication (Get from Kinde)
KINDE_ISSUER_URL=https://your-domain.kinde.com
KINDE_CLIENT_ID=your_client_id
KINDE_CLIENT_SECRET=your_client_secret
# JWT Configuration
JWT_SECRET=your_jwt_secret_key
# Server Configuration
NODE_ENV=development
# Create database schema
npm run setup-db
# In a separate terminal
npm run auth-server
Visit http://localhost:3000 to login and get your authentication token.
# In another terminal
npm run dev
Add to your Cursor MCP configuration (~/.cursor/mcp.json):
{
"mcpServers": {
"my-blog": {
"command": "node",
"args": ["dist/universal-server.js"],
"cwd": "/path/to/your/my-blog",
"env": {
"DATABASE_URL": "your_database_url",
"KINDE_ISSUER_URL": "your_kinde_issuer_url",
"KINDE_CLIENT_ID": "your_kinde_client_id",
"KINDE_CLIENT_SECRET": "your_kinde_client_secret",
"JWT_SECRET": "your_jwt_secret"
}
}
}
}
npm run auth-serverhttp://localhost:3000save_token tool with your tokenAfter authentication, you'll have access to:
Authentication Tools
login - Get authentication URLsave_token - Save your authentication tokenlogout - Log out current userrefresh_billing_status - Check billing statusCRUD Tools (based on your template)
create_[entity] - Create new itemslist_[entity]s - List all itemsget_[entity] - Get specific itemupdate_[entity] - Update existing itemdelete_[entity] - Delete itemmy-blog/
├── package.json # Dependencies and scripts
├── tsconfig.json # TypeScript configuration
├── .env.example # Environment template
├── README.md # Project documentation
└── src/
├── app-config.ts # Application configuration
├── universal-server.ts # Main MCP server
├── setup-db.ts # Database setup script
├── kinde-auth-server.ts # Authentication server
└── core/ # Core MCP modules
├── auth/ # Authentication manager
├── database/ # Database manager
├── server/ # MCP server core
└── tools/ # Tool factory
MCP Server Not Detected in Cursor:
~/.cursor/mcp.json syntaxAuthentication Issues:
Database Connection Issues:
npm run setup-db to create schemanpx mcp-starter-kitMIT License - see LICENSE file for details.
Contributions welcome! Please read our contributing guidelines.
Ready to build your first MCP application? Run npx mcp-starter-kit and start building!
FAQs
Universal MCP starter kit with authentication, database, and billing
We found that mcp-starter-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.