skills.rest
ralvarezdev
ralvarezdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

mcp-architect

Implement standards-based MCP servers with OAuth 2.1 and SSRF guardrails.

3|Updated Feb 26, 2026
Search Tags:#protocol#mcp#server#prompts#structured-output#streamable-http#oauth-2.1
One-click install
npx skills add https://github.com/ralvarezdev/ralvaskills --skill mcp-architect-ralvarezdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mcp-architect
Source: https://github.com/ralvarezdev/ralvaskills/tree/main/skills/protocols/mcp-architect
Command: npx skills add https://github.com/ralvarezdev/ralvaskills --skill mcp-architect-ralvarezdev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

MCP servers are standardized to expose tools, resources, and prompts to LLM clients via JSON-RPC over streamable HTTP, with a secure transport, per-session lifecycle, and a compliance model for versioning and safety.

Core Features & Use Cases

  • Exposes tools, resources, and prompts with typed input/output schemas and descriptive tool annotations.
  • Streamable HTTP transport with session management, optional subscriptions, and server-initiated interactions.
  • OAuth 2.1 with RFC 8707 resource indicators, PKCE requirements, and audience-bound token validation.
  • Built-in safety guardrails against SSRF, prompt injection, and data leakage, plus testing support via MCP Inspector.
  • Useful for designing, auditing, or wrapping REST/gRPC backends for LLM-driven workflows.

Quick Start

Create a minimal MCP server using the official Go SDK or FastMCP and expose a sample tool to validate initialization and tool invocation.

Frequently Asked Questions about mcp-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build an MCP server with OAuth 2.1 and Streamable HTTP?▼

To build an MCP server with OAuth 2.1 and Streamable HTTP, implement standards-based JSON-RPC framing with per-session management, PKCE requirements, and audience-bound token validation to secure LLM client interactions.

What is MCP server architecture used for?▼

MCP server architecture is used to expose tools, resources, and prompts to LLM clients via JSON-RPC over Streamable HTTP, providing a secure transport layer and compliance model for versioning and safety.

How do I add structured output and tool annotations to an MCP server?▼

You add structured output and per-tool annotations to an MCP server by defining typed input and output schemas within your tool implementations, applying MCP protocol versioning to ensure client compatibility and safety.

Does MCP server architecture include guardrails against SSRF and prompt injection?▼

MCP server architecture includes built-in safety guardrails against SSRF, prompt injection, and data leakage, enforcing protocol versioning and audience-bound token validation to protect sensitive data and downstream services.

Can I use the Go SDK or FastMCP to create a minimal MCP server?▼

You can use the official Go SDK or FastMCP to create a minimal MCP server, exposing a sample tool to quickly validate initialization and tool invocation within your LLM-driven workflows.

What's the best way to audit REST backends for LLM workflows?▼

The best way to audit or wrap REST and gRPC backends for LLM workflows is implementing a standards-based MCP server with per-session lifecycle management, structured output, and OAuth 2.1 authentication for secure interactions.

Related Skills

Explore More Software Engineering Skills→
lucasgaldinoslucasgaldinos

python-mcp-server-generator

Generate a production-ready FastMCP server in Python with stdio or HTTP transport.

Community
Advanced
aeonbridgeaeonbridge

mcp

Build MCP servers and clients with Python or TypeScript SDKs.

Official
Intermediate
qauth-labsqauth-labs
23

auth-oauth

Implement OAuth 2.0/2.1 authorization flows with PKCE and redirect URI validation.

Official
Advanced
FaysilAlshareefFaysilAlshareef
4

gateway-endpoint

Expose REST endpoints that delegate to typed gRPC clients in .NET gateway controllers.

Community
Intermediate