Developer packages OAuth 2.1 + Stripe billing boilerplate for MCP servers
A developer built a reusable boilerplate for MCP servers that includes OAuth 2.1 with PKCE, API key management, and Stripe usage-based billing after spending a week on the plumbing. The project aims to save others from reinventing the same auth and billing infrastructure.
Entities
Related
CertLocker: DevOps control plane for secrets and MCP agent access
CertLocker is a DevOps control plane that manages secrets, tokens, and MCP (Model Context Protocol) agent access. It replaces shared .env files with scoped tokens, enabling secure, role-based access for teams using LLM agents like Claude. The product solves the problem of managing credentials and access for distributed teams working on real client automation tasks.
MCP's OAuth scoping undermined by static API key proxies
A developer reports that many agent CLIs still store static API keys in environment variables, creating a large blast radius if leaked. The Model Context Protocol (MCP) aims to fix this with scoped OAuth consent per tool, but half of the servers examined simply proxy a static key, defeating the purpose.
Broll: MCP server for coding agents to create and publish marketing content
Broll is an MCP server that gives coding agents (Claude Code, Codex) a content studio to generate images, videos, carousels, and publish to Bluesky/Mastodon. It uses LLMs to draft content and automate marketing workflows, solving the problem of indie developers needing to create and publish marketing material without manual effort.
CertLocker: DevOps control plane for secrets and MCP agent access
CertLocker is a DevOps control plane that manages secrets, tokens, and MCP (Model Context Protocol) agent access. It replaces .env files with a tokenized MCP approach, enabling secure, role-based access for LLM agents like Claude. The product targets agencies and teams using LLM agents for client work, solving the problem of managing credentials and access across distributed staff and contractors.
AI coding agent creates real cloud infra behind dry-run + confirm
An MCP tool plugin for AI coding agents (Claude Code, Cursor) that provisions real cloud infrastructure (databases, auth, storage, hosting) on the user's cloud account. The agent creates projects, wires keys, and writes integration code, but requires a dry-run preview and explicit confirmation before any paid resource is created. Solves the trust and cost-control problem of letting AI directly manage cloud resources.