Cloudflare Remote MCP Server Template

Enables the deployment of remote Model Context Protocol servers on Cloudflare Workers without authentication. It allows users to host custom tools and connect them to AI clients using Server-Sent Events (SSE).

→ qememe/cf-design-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// known CVEs in dependencies3 medium

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumagents@0.3.1GHSA-cvhv-6xm6-c3v4

Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler

mediumagents@0.3.1GHSA-r7x9-8ph7-w8cg

Cloudflare Agents SDK has Insecure Direct Object Reference (IDOR) via Header-Based Email Routing

mediumagents@0.3.1GHSA-w5cr-2qhr-jqc5

Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/qememe-cf-design-mcp-syyarj)](https://m8ven.ai/mcp/qememe-cf-design-mcp-syyarj)

commit: fc6cb4ac95c0747c8de958614b820129b67f2ced

code hash: 5a049fbe9fe826716f85c46cf92f47cab5c3e3eb339879f55e07ebffa9b03f8a

verified: 6/14/2026, 10:03:10 AM

view raw JSON →