Deployment

MCPBox doesn't handle TLS — terminate it at a reverse proxy. For OAuth, set issuer to your public URL and use sqlite storage for persistence.

INFO

MCPBox is single-instance only — don't run multiple instances behind a load balancer.

Quick remote access

cloudflared gives you a public HTTPS URL with no account required:

cloudflared tunnel --url http://localhost:8080

Set the generated URL as your issuer:

{
  "auth": {
    "type": "oauth",
    "issuer": "https://<tunnel-id>.trycloudflare.com",
    "identityProviders": [
      {
        "type": "local",
        "users": [{ "username": "user1", "password": "${MCPBOX_PASSWORD}" }]
      }
    ],
    "dynamicRegistration": true
  },
  "storage": {
    "type": "sqlite",
    "path": "./data/mcpbox.db"
  }
}

Run:

npx mcpbox

or

docker run -v ./mcpbox.json:/config/config.json -v ./data:/data -p 8080:8080 ghcr.io/kandobyte/mcpbox

The URL changes each time you restart cloudflared. For a stable URL, create a named tunnel.