Upshift

upshift-mcp

Upshift's reference MCP server. Three tools, deployed remote, on MCP spec revision 2026-07-28.

It exists to do two jobs at once: be genuinely useful to an agent, and be the worked example a buyer looks at before paying us to build theirs. Every price it quotes is generated from the live store, so it cannot invent one.

https://mcp.upshiftsites.com/mcp

{

"mcpServers": { "upshift": { "type": "http", "url": "https://mcp.upshiftsites.com/mcp" } } }

Or run the same server locally, for clients that spawn a command rather than call a URL. Nothing to clone or build — it is published on npm:

{

"mcpServers": { "upshift": { "command": "npx", "args": ["-y", "upshift-mcp"] } } }

The same binary from a shell. stdio is the default; --http serves the full Worker on localhost instead:

npx upshift-mcp

Tools

Free and rate limited to 20 calls/minute per IP.

Layout

src/

worker.ts Cloudflare entrypoint: routing, origin policy, rate limit server.ts The three tools; the one place production layers are applied audit.ts Audit rules — pure, so every rule is testable without a network safe-fetch.ts The SSRF guard for the one tool that takes a caller's URL match.ts Template matching services.ts What we charge for MCP work catalog.generated.ts Template lines + prices, generated from the store landing.ts The page a human gets at / evals/ 12 qa_pairs, run over the real protocol test/ 32 tests: protocol conformance + the pure logic

Working on it

npm install

npm run dev # http://127.0.0.1:8788/mcp npm run ci:verify # typecheck + tests + evals

wrangler dev needs macOS 13.5+ and will not boot on the build machine, so npm run dev serves the *production* src/worker.ts on Node against an in-memory KV. Same handler, same routes, same tools — not a second implementation. Deployment is still wrangler deploy.

Prices come from ../upshift-agency-site/src/data/store.ts. After changing them there:

npm run gen:catalog

Deploying

Live since 2026-08-16 at https://mcp.upshiftsites.com/mcp. KV namespace and custom domain are provisioned; npm run deploy ships a new version.

Listed

• Official MCP registry: com.upshiftsites/mcp, published active against the DNS-verified namespace.
• Glama — installable, with a released container built from this repo.
• npm: upshift-mcp — npx upshift-mcp runs this same server locally.

Honest gaps

In docs/VALIDATION.md — what is verified, what is not, the four real bugs the eval suite caught during the build (one of them a security bypass), and the fifth it missed. That document is the argument for shipping evals alongside a server, which is the part of this we sell; the miss is part of the argument, not an exception to it.

Licence

MIT. Lift anything useful. If you would rather we built and ran it for you, that is at https://upshiftsites.com/store/mcp-server-service/.