A remote MCP server that lets an AI assistant do real work inside a business app, with a sign in, permissions and a record of everything it did.
Twelve tools, each declaring exactly what it accepts, what it returns and which permission it needs.
Real OAuth 2.1 with PKCE and dynamic client registration, so clients register themselves.
A live audit trail of every call including the refused ones, kept as a fingerprint so the log never holds the data itself.
Rate limits per client, and a conformance suite that proves the server matches the spec.
A playground where you can run any tool in the browser before connecting a client.
Cloudflare Workers, D1, KV, Streamable HTTP MCP and OAuth 2.1 with PKCE.
This is our own working demo, not client work. Sign in as a demo user and try it at mcp.phoenixcodes.org. There is a second one at sql.phoenixcodes.org, a SQL guard we tested against about seven hundred attack variants.
0 likes · 0 views · Nov 9, 2026
A remote MCP server with twelve permissioned tools, OAuth 2.1 sign in with PKCE, rate limits and a live audit trail of every call it ran or refused.
