← Back to directory
X

XMCP

Community
Framework / SDK
A TypeScript framework for building MCP servers

This is a framework for building MCP servers or agents, not a server you connect a client to.

Category
Dev Tools #327 of 438
Stars
★ 1.3k Very popular
Runtime
Node.js
Credentials
No credential needed
License
MIT
Last commit
⚠
43FMRS · D

The source identifies xmcp as an MIT-licensed TypeScript MCP framework maintained by basement.studio. It provides file-system routing, hot reloading, middleware, extensible configuration, platform-flexible deployment, and Vercel support. The source does not provide specific MCP tools, transport protocols, client compatibility, or a client configuration example.

Strongest · Setup experience 11/20 Weakest · Reliability 5/20

Reliability
5/20
Security and permissions
8/20
Maintenance
10/20
Documentation
9/20
Setup experience
11/20
Why each score
Reliability 5/20
Only the README is provided; the manifest is not cached, and no source code, tests, or CI evidence is available. MCP initialization, tool-list handshake, actual tool behavior, error handling, and dependency control cannot be verified. The README makes a happy path plausible, but the evidence is insufficient, so substantial points are deducted.
Security and permissions 8/20
The README mentions authentication and middleware support and provides a security-report email. However, no source code or configuration examples verify least privilege, credential handling, data boundaries, external network behavior, or confirmation for dangerous operations. No stated red-line risk is visible, but missing evidence warrants a significant deduction.
Maintenance 10/20
The repository is not archived and lists an MIT license and a security-report channel. The supplied material does not establish release cadence, commit activity, issue response, dependency updates, or sustained ownership. The license and reporting channel support a mid-range score, while maintenance evidence remains limited.
Documentation 9/20
The README states the project purpose, provides quick-start commands, lists major features, links to documentation, and gives a security-report method. It does not provide authentication configuration, tool parameters, limits, cost information, platform-specific details, troubleshooting, or reviewable end-to-end examples. The unavailable full documentation is treated as missing evidence.
Setup experience 11/20
The README supplies two initialization paths, create-xmcp-app and init-xmcp, and claims support for Next.js, Express, any platform, and Vercel. It does not state runtime prerequisites, provide mainstream MCP client connection configuration, explain authentication steps, or include verifiable end-to-end execution evidence, so the score is conservatively above average but limited.

Static review · not runListed 2026-07-29

Read the FMRS scoring method →

Fit and risk

Best for

  • MCP developers using or adopting TypeScript
  • Projects that benefit from hot reloading and file-system routing
  • MCP server projects requiring extensible configuration and middleware support

Not for

  • Users seeking a ready-to-connect MCP server with prebuilt business tools
  • Users needing documented client compatibility, transport details, or a built-in tool inventory

Required permissions

  • The README does not specify concrete runtime system, file, or network permissions
  • If authentication or custom middleware is used, required permissions depend on the developer's configuration

Risks and side effects

  • This is a framework for developing MCP servers, not a ready-made business-tool server
  • Authentication and custom middleware must be configured by the developer, and misconfiguration may create security issues
  • Deployment and platform configuration may introduce operational risks; the README does not provide specific security settings

Setup

Before you start

Runtime:Node.js

For a new application, run npx create-xmcp-app@latest. To initialize xmcp in an existing Next.js or Express project, run npx init-xmcp@latest. See xmcp.dev and its documentation for more information.

Check that it works

Run npx create-xmcp-app@latest to bootstrap a project and start the dev server; hot reloading and auto-registration of tools from the tools directory confirm the installation works.

Troubleshooting

  1. Confirm that the Node.js project environment and npx command are available
  2. Use create-xmcp-app@latest for a new project and init-xmcp@latest for an existing Next.js or Express project
  3. Check that the tools and prompts directories follow the file-system routing convention
  4. Review MCP server configuration, middleware, and deployment-platform settings
  5. Report security vulnerabilities to [email protected]

Use cases

Build MCP servers with TypeScript
Automatically register tools and prompts through file-system routing
Configure authentication or custom middleware for an MCP server
Deploy MCP servers across platforms or with Vercel

Overview

xmcp is a framework for building and shipping MCP servers with TypeScript. It is designed to streamline development and lower the barrier to creating tools in the Model Context Protocol ecosystem.

Similar servers

Context7 80 · B

Upstash's official server providing up-to-date third-party library docs for AI coding assistants

★ 63.3k · Tools 2 Compare with this →

Source revision 2e4a09f3fdca Data synced 2026-10-19 Read the FMRS scoring method