
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
quickmcp-sdk
Advanced tools
The easiest way to build MCP servers in TypeScript
QuickMCP is a simplified TypeScript SDK for MCP (Model Context Protocol) development that removes complexity while providing powerful features. Build MCP servers in minutes, not hours.
npm install quickmcp-sdk
import { createServer, Responses, Schema } from 'quickmcp-sdk';
const server = createServer({ name: 'my-server' });
server.tool('greet', async (args) => {
const { name } = args as { name: string };
return Responses.success({ greeting: `Hello, ${name}!` });
}, {
description: 'Greet someone',
schema: Schema.build({ name: 'string' })
});
await server.start();
import { createServer, Responses, Resources, Prompts } from 'quickmcp-sdk';
const server = createServer({
name: 'enterprise-api',
transport: 'http',
http: {
port: 3000,
enableCors: true,
sessionManagement: true
}
});
// Tools for business logic
server.tool('createUser', async (args) => {
const { name, email } = args as { name: string; email: string };
return Responses.success({
id: Math.random().toString(36),
name,
email,
createdAt: new Date().toISOString()
});
}, {
description: 'Create a new user account',
schema: { name: 'string', email: 'string' }
});
// Resources for data access
server.resource('config', async ({ uri }) => {
return Resources.json(uri, {
apiVersion: '1.0.0',
features: ['auth', 'metrics', 'cors']
});
}, {
uri: 'config://app',
description: 'Application configuration'
});
// Prompts for AI interactions
server.prompt('codeReview', async (args) => {
const { language } = args as { language: string };
return Prompts.user(`Review this ${language} code for best practices`);
}, {
description: 'Generate code review prompts',
schema: { language: 'string' }
});
await server.start();
| Feature | QuickMCP | Official SDK | Improvement |
|---|---|---|---|
| Schema Validation | 5ms | 50ms | 90% faster |
| Memory Usage | Pooled Objects | High GC | 60% less |
| Request Throughput | 1000+ req/s | 200 req/s | 5x faster |
| Setup Complexity | 3 lines | 15+ lines | 80% less code |
import { AuthMiddleware, RateLimitMiddleware } from 'quickmcp-sdk/middleware';
// JWT Authentication
const auth = new AuthMiddleware({
type: 'bearer',
secret: process.env.JWT_SECRET
});
// Rate Limiting
const rateLimit = new RateLimitMiddleware({
points: 100, // requests
duration: 60 // per minute
});
server.use(auth.middleware);
server.use(rateLimit.middleware);
import { MetricsMiddleware } from 'quickmcp-sdk/middleware';
const metrics = new MetricsMiddleware();
server.use(metrics.middleware);
// Get comprehensive metrics
console.log(metrics.getMetrics());
// {
// uptime: 123456,
// totalRequests: 5420,
// errorRate: 0.02,
// avgResponseTime: 45,
// toolCalls: { "createUser": 156, "getData": 89 }
// }
import { schemaCache, responsePool } from 'quickmcp-sdk/performance';
// Automatic schema caching (90% faster validation)
// Automatic response object pooling (60% less memory)
// Get cache statistics
console.log(schemaCache.getStats());
// { hits: 1580, misses: 23, hitRate: 0.985 }
# Create new project
npx quickmcp create my-server --template=enterprise
cd my-server
# Development with hot reload
npx quickmcp dev --port=3000
# Build for production
npx quickmcp build
# Run tests
npx quickmcp test --coverage
basic: Simple STDIO server for getting startedenterprise: Full HTTP server with auth, metrics, docker supportapi: REST API integration patternsai-assistant: AI/LLM integration examplesnode examples/01-basic-calculator/index.ts
node examples/02-weather-decorators/index.ts
node examples/03-enterprise-api/index.ts
node examples/04-test-client/test-client.js
| Feature | QuickMCP | Official SDK | FastMCP (Python) |
|---|---|---|---|
| Language | TypeScript | TypeScript | Python |
| Setup Complexity | ⭐⭐⭐⭐⭐ | ⭐⭐ | ⭐⭐⭐⭐ |
| Performance | ⭐⭐⭐⭐⭐ | ⭐⭐⭐ | ⭐⭐⭐⭐ |
| Enterprise Features | ⭐⭐⭐⭐⭐ | ⭐ | ⭐⭐⭐⭐ |
| Developer Experience | ⭐⭐⭐⭐⭐ | ⭐⭐ | ⭐⭐⭐⭐ |
| Documentation | ⭐⭐⭐⭐⭐ | ⭐⭐⭐ | ⭐⭐⭐⭐ |
const server = createServer({
name: 'my-server',
transport: 'http' | 'stdio',
http: { port: 3000, enableCors: true },
debug: true
});
// Fluent API
server.tool('toolName', handler, config);
// With full configuration
server.tool('processData', async (args) => {
return Responses.success(result);
}, {
description: 'Process data with operations',
schema: Schema.build({
data: 'array',
operations: 'array'
})
});
// Static resource
server.resource('config', handler, {
uri: 'config://app',
description: 'App configuration'
});
// Template resource
server.resource('userProfile', handler, {
uri: 'users://{userId}/profile',
isTemplate: true
});
// Success responses
return Responses.success(data, message);
return Responses.list(items, message);
return Responses.links(linkArray);
// Error responses
return Responses.error(message, details);
// Direct responses
return "Simple text";
return { data: "value" };
return [Response.text("Hi"), Response.json(data)];
Install QuickMCP
npm install quickmcp-sdk
Create your first server
npx quickmcp create my-server
cd my-server && npm install
Start development
npm run dev
Test with examples
# Terminal 1: Start server
node examples/03-enterprise-api/index.ts
# Terminal 2: Test client
node examples/04-test-client/test-client.js
We welcome contributions! Please see our contributing guidelines for details.
MIT License - see LICENSE file for details.
QuickMCP: The TypeScript MCP framework that makes enterprise development simple and enjoyable! 🚀
Built with ❤️ for the MCP community.
FAQs
A simplified TypeScript SDK for MCP development without complexity
The npm package quickmcp-sdk receives a total of 30 weekly downloads. As such, quickmcp-sdk popularity was classified as not popular.
We found that quickmcp-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.