XenMCP offers hosted remote MCP with spec-compliant OAuth, per-customer gVisor sandboxes
esso_dev · reddit · 2026-11-10
A developer launched XenMCP (free beta), a hosted service that puts remote MCP servers behind spec-compliant per-user OAuth, addressing the pain that stdio servers are unreachable from claude.ai/ChatGPT and static API keys in URLs leak into logs and can't be revoked per person.
- Each server gets its own origin via Streamable HTTP; auth follows the MCP spec end-to-end: RFC 9728 protected resource metadata → RFC 8414 → dynamic client registration (RFC 7591) → auth code + PKCE S256, with tokens audience-bound via RFC 8707.
- Catalog servers (official MongoDB, mcp-grafana, DBHub, plus read-only Redis/Elasticsearch/Docker/WordPress/Shopify servers) run in per-customer gVisor sandboxes; API-key-only servers can sit behind the same OAuth layer.
- Security posture: AES-256-GCM credentials, read-only by default, single fixed egress IP, logs without arguments, hosted in Germany.
Tested with Claude web/desktop/mobile, Claude Code and ChatGPT; the author is soliciting auth-flow breakage and security review.
More from coding & agent
- Elastic TTS: custom text-to-speech engine coded by Gemini 4 Argon — alexanderchen · 2026-11-10
- 'Proof-of-Agent' mining: one user runs POA across Hermes, OpenClaw, Grok Bot and Muse — adamamcbride · 2026-11-10
- Vercel MCP opens to all clients via Client ID Metadata Documents, ending allowlist friction — steren · 2026-11-10
- User Lets Fable 5.2 Max 'Do Whatever It Wants' — It Keeps Working for Over an Hour — mallow610 · 2026-11-10
- Simon Willison vibe-codes a Beep Locator with Claude Code to triangulate a mystery beep using five devices — RealGeneKim · 2026-11-10
- Free MCP server vulnerable.now merges CVE data from 8 sources, no API key — Mistilziela · 2026-11-10