# Nodeflare

> Deploy, manage, and scale MCP servers with one click. Automatic stdio→SSE conversion.

- **Type:** MCP server
- **Install:** `agentstack add mcp-nodeflare-dev-nodeflare`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [nodeflare-dev](https://agentstack.voostack.com/s/nodeflare-dev)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [nodeflare-dev](https://github.com/nodeflare-dev)
- **Source:** https://github.com/nodeflare-dev/nodeflare
- **Website:** https://nodeflare.tech/

## Install

```sh
agentstack add mcp-nodeflare-dev-nodeflare
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Nodeflare

Deploy, manage, and scale MCP servers — Vercel for MCP.

[](https://opensource.org/licenses/MIT)

🌐 **[Try it now → nodeflare.tech](https://nodeflare.tech)**

## What is Nodeflare?

Nodeflare is an MCP (Model Context Protocol) hosting platform that lets you deploy any MCP server with just a GitHub URL. It automatically converts stdio-based MCP servers to the Streamable HTTP transport, making them accessible from remote AI assistants like Claude.

**Key Features:**
- 🚀 **One-click deployment** — Just paste a GitHub URL
- 🔄 **Automatic stdio→Streamable HTTP conversion** — Works with any MCP server
- 🔐 **Built-in authentication** — API keys, OAuth 2.0, scoped permissions
- 📊 **Access logging** — Full audit trail for enterprise compliance
- 🌍 **Global edge deployment** — Powered by Fly.io

## Architecture

```
┌─────────────────────────────────────────────────────────────────┐
│                         Nodeflare                               │
├─────────────────────────────────────────────────────────────────┤
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────────────────┐  │
│  │   Next.js   │  │  API Server │  │     Proxy Gateway       │  │
│  │  Frontend   │──│   (Axum)    │──│   (Rate Limit, Auth)    │  │
│  └─────────────┘  └─────────────┘  └─────────────────────────┘  │
│         │                │                      │               │
│         │                │                      │               │
│  ┌──────┴────────────────┴──────────────────────┴──────────┐   │
│  │                    PostgreSQL + Redis                    │   │
│  │                    (Neon + Upstash)                      │   │
│  └──────────────────────────────────────────────────────────┘   │
│         │                                                       │
│  ┌──────┴──────┐                                               │
│  │   Builder   │───────────────────────────────────────────────┤
│  │   Worker    │         Build & Deploy                        │
│  └─────────────┘                                               │
│         │                                                       │
│  ┌──────┴──────────────────────────────────────────────────┐   │
│  │              Fly.io Machines (Container Runtime)         │   │
│  │  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────┐    │   │
│  │  │ MCP Srv │  │ MCP Srv │  │ MCP Srv │  │ MCP Srv │    │   │
│  │  └─────────┘  └─────────┘  └─────────┘  └─────────┘    │   │
│  └──────────────────────────────────────────────────────────┘   │
└─────────────────────────────────────────────────────────────────┘
```

## Tech Stack

- **Backend**: Rust (Axum, SQLx, Tokio)
- **Frontend**: Next.js 15, TypeScript, Tailwind CSS
- **Database**: [Neon](https://neon.tech) (Serverless PostgreSQL)
- **Cache/Queue**: [Upstash](https://upstash.com) (Serverless Redis)
- **Container Runtime**: Fly.io Machines
- **Billing**: Stripe

## Project Structure

```
nodeflare/
├── crates/
│   ├── api/            # Main API server (Axum)
│   ├── auth/           # JWT, OAuth, API keys, encryption
│   ├── billing/        # Stripe billing
│   ├── builder/        # Build worker (Docker, Fly.io)
│   ├── common/         # Shared types, config, errors
│   ├── container/      # Container runtime abstraction
│   ├── db/             # Database models & repositories
│   ├── email/          # Email sending (Resend)
│   ├── github/         # GitHub App integration
│   ├── mcp-runtime/    # MCP protocol types
│   ├── proxy/          # MCP Proxy gateway
│   └── queue/          # Job definitions
├── apps/
│   └── web/            # Next.js frontend
├── migrations/         # Database migrations
└── docker/             # Dockerfiles
```

## Getting Started

### Prerequisites

- Rust 1.75+
- Node.js 20+
- Docker & Docker Compose

### Local Development

1. **Clone and setup**

```bash
git clone https://github.com/nodeflare-dev/nodeflare.git
cd nodeflare
cp .env.example .env
```

2. **Setup Neon (PostgreSQL)**

- Create an account at [neon.tech](https://neon.tech)
- Create a new project
- Copy the connection string to `.env`:
  ```
  DATABASE_URL=postgresql://user:pass@ep-xxx.region.aws.neon.tech/dbname?sslmode=require
  ```

3. **Setup Upstash (Redis)**

- Create an account at [upstash.com](https://upstash.com)
- Create a new Redis database
- Copy the connection string to `.env`:
  ```
  REDIS_URL=rediss://default:xxx@xxx.upstash.io:6379
  ```

4. **Configure environment variables**

Set GitHub OAuth, Fly.io, and encryption keys in `.env` (see Configuration section below)

5. **Run database migrations**

```bash
cargo install sqlx-cli
sqlx migrate run
```

6. **Start backend services**

```bash
# Terminal 1: API server
cargo run --bin mcp-api

# Terminal 2: Proxy gateway
cargo run --bin mcp-proxy

# Terminal 3: Builder worker
cargo run --bin mcp-builder
```

7. **Start frontend**

```bash
cd apps/web
npm install
npm run dev
```

8. **Open in browser**

Navigate to http://localhost:3000

## Configuration

### Required

| Variable | Description |
|----------|-------------|
| `DATABASE_URL` | PostgreSQL connection string |
| `REDIS_URL` | Redis connection string |
| `JWT_SECRET` | JWT signing secret (64+ bytes) |
| `ENCRYPTION_KEY` | AES-256 key for secrets (32 bytes, base64) |
| `GITHUB_CLIENT_ID` | GitHub OAuth App client ID |
| `GITHUB_CLIENT_SECRET` | GitHub OAuth App client secret |
| `GITHUB_APP_ID` | GitHub App ID for repo access |
| `GITHUB_APP_PRIVATE_KEY` | GitHub App private key (PEM) |
| `FLY_API_TOKEN` | Fly.io API token for deployments |

### Stripe (Billing)

| Variable | Description |
|----------|-------------|
| `STRIPE_SECRET_KEY` | Stripe API secret key |
| `STRIPE_WEBHOOK_SECRET` | Stripe webhook secret |
| `APP_URL` | App URL for Stripe redirects |

### Email (Resend)

| Variable | Description |
|----------|-------------|
| `RESEND_API_KEY` | Resend API key |
| `EMAIL_FROM` | Sender email address |

### Generate Keys

```bash
# JWT Secret
openssl rand -base64 64

# Encryption Key
openssl rand -base64 32
```

## Deployment

### Production (Fly.io)

```bash
# API
fly deploy -c fly.api.toml

# Proxy
fly deploy -c fly.proxy.toml

# Web
fly deploy -c fly.web.toml
```

## MCP Proxy

The proxy gateway handles MCP requests via **subdomain-based routing**:

```
POST https://{server-slug}.nodeflare.tech/mcp
Authorization: Bearer {access-token}
```

Example: If server slug is `my-notion-mcp`:
```
https://my-notion-mcp.nodeflare.tech/mcp
```

Features:
- **Subdomain-based routing** — Clean URLs like Vercel
- Access token / OAuth authentication
- Rate limiting (sliding window)
- Request logging
- Tool-level permissions

## Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

## License

MIT

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [nodeflare-dev](https://github.com/nodeflare-dev)
- **Source:** [nodeflare-dev/nodeflare](https://github.com/nodeflare-dev/nodeflare)
- **License:** MIT
- **Homepage:** https://nodeflare.tech/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-nodeflare-dev-nodeflare
- Seller: https://agentstack.voostack.com/s/nodeflare-dev
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.