V
vinkius-labs/mcpfusion
MCP Fusion - The TypeScript framework for secure MCP servers
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Install & config
Client config (built from the install command this repo gives)
{
"mcpServers": {
"vinkius-labs-mcpfusion": {
"command": "npx",
"args": ["@mcpfusion/core"]
}
}
}Parsed from the README we fetched on 2026-11-06; we have not executed it.
command/args come from the install command the repository states. When it is ambiguous, the project README wins.
VS Code (.vscode/mcp.json - the key is servers)
{
"servers": {
"vinkius-labs-mcpfusion": {
"command": "npx",
"args": ["@mcpfusion/core"]
}
}
}Same server, but VS Code keeps it under <code>servers</code>.
Claude Code (command line)
claude mcp add --transport stdio vinkius-labs-mcpfusion -- npx @mcpfusion/core
Claude Code does not read a config file; add the server with this command.
Key names differ by client: Clients & CLI
- Source
- collected from the abordage/awesome-mcp list · type: MCP server
- Harvest history
- first seen 2026-11-05 · last seen 2026-11-14 · seen 10× · listed by 10 sources
- Score
- score 1,003 · 10 sources · mcp
- Install
npx @mcpfusion/core
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
npx @mcpfusion/core. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
first catalogued 2026-11-05；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.
# MCP FUSION
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
The TypeScript framework for secure, MCP 2.0-native servers.
-purple)
MCP Fusion is a TypeScript framework that enforces security at the architectural level of every MCP server. Raw data never reaches the LLM without passing through a typed egress firewall. Tools are physically removed from the agent's namespace when the workflow state forbids them. Every behavioral surface is hashed, locked, and auditable in version control.
The framework ships with a SKILL.md — a machine-readable architectural contract. AI coding agents read the Skill and produce correct, governed servers on the first pass.
## MCP 2.0 (2026-07-28) — Full Compliance
MCP Fusion is 100% compatible with MCP 2.0 (protocol revision 2026-07-28). Every feature the spec defines is implemented or handled via the MCP SDK v2. Every feature the spec deprecates is deprecated in MCP Fusion.
### Implemented MCP 2.0 Features
| Feature | Status | How |
| Stateless protocol | ✅ | transport: 'stateless' — per-request serving, no sessions, no initialize handshake, Mcp-Method/Mcp-Name header routing |
| Multi Round-Trip Requests (MRTR) | ✅ | requireInput() + readInput() — native InputRequiredResult / resultType: "inputrequired" model |
| Request State Sealing | ✅ | requestStateKey — HMAC-SHA256 sealed state for multi-round elicitation (SEP-2322) |
| Structured Content | ✅ | successStructured() + structuredContent field on ToolResponse |
| Output Schema | ✅ | outputSchema in compileToolDefinition() wire format |
| List Caching | ✅ | ttlMs / cacheScope directly on result root (SEP-2549) — public / private scope |
| Pagination | ✅ | cursor / nextCursor on prompts/list (extensible to all list ops) |
| server/discover | ✅ | Handled by MCP SDK v2 Server |
| resultType | ✅ | Handled by MCP SDK v2 Server ("complete" / "inputrequired") |
| Per-request meta | ✅ | io.modelcontextprotocol/ fields handled by MCP SDK v2 |
| resources/templates/list | ✅ | URI template resources with pagination |
| subscriptions/listen | ✅ | MCP 2.0 stream-based subscription pattern with filter + acknowledgment |
| x-mcp-header | ✅ | .withHeaderParam() on FluentToolBuilder — parameter mirroring to HTTP headers |
| title & icons | ✅ | Tool.title, BaseModel.title, Icon domain model, createIcon() |
| resourcelink | ✅ | Content type in tool results and prompt messages |
| JSON Schema 2020-12 | ✅ | Default dialect enforced by MCP SDK v2 |
| Error codes (-32020–-32022) | ✅ | HeaderMismatch, MissingRequiredClientCapability, UnsupportedProtocolVersion |
| Protocol version | ✅ | Defaults to 2026-07-28 in all server metadata (Server Card, introspection) |
### Deprecated Features (mirrored from MCP 2.0)
All features deprecated by MCP 2.0 (SEP-2577 / SEP-2596) are deprecated in MCP Fusion with @deprecated markers and migration guidance. They remain functional during the deprecation window (earliest removal: 2027-07-28).
| Deprecated Feature | Migration Path |
| Roots | Pass directories/files via tool parameters, resource URIs, or server configuration |
| Sampling | Integrate directly with LLM provider APIs |
| Logging (notifications/message) | Log to stderr for stdio; use OpenTelemetry (TelemetrySink / DebugObserver) |
-purple)
MCP Fusion is a TypeScript framework that enforces security at the architectural level of every MCP server. Raw data never reaches the LLM without passing through a typed egress firewall. Tools are physically removed from the agent's namespace when the workflow state forbids them. Every behavioral surface is hashed, locked, and auditable in version control.
The framework ships with a SKILL.md — a machine-readable architectural contract. AI coding agents read the Skill and produce correct, governed servers on the first pass.
## MCP 2.0 (2026-07-28) — Full Compliance
MCP Fusion is 100% compatible with MCP 2.0 (protocol revision 2026-07-28). Every feature the spec defines is implemented or handled via the MCP SDK v2. Every feature the spec deprecates is deprecated in MCP Fusion.
### Implemented MCP 2.0 Features
| Feature | Status | How |
| Stateless protocol | ✅ | transport: 'stateless' — per-request serving, no sessions, no initialize handshake, Mcp-Method/Mcp-Name header routing |
| Multi Round-Trip Requests (MRTR) | ✅ | requireInput() + readInput() — native InputRequiredResult / resultType: "inputrequired" model |
| Request State Sealing | ✅ | requestStateKey — HMAC-SHA256 sealed state for multi-round elicitation (SEP-2322) |
| Structured Content | ✅ | successStructured() + structuredContent field on ToolResponse |
| Output Schema | ✅ | outputSchema in compileToolDefinition() wire format |
| List Caching | ✅ | ttlMs / cacheScope directly on result root (SEP-2549) — public / private scope |
| Pagination | ✅ | cursor / nextCursor on prompts/list (extensible to all list ops) |
| server/discover | ✅ | Handled by MCP SDK v2 Server |
| resultType | ✅ | Handled by MCP SDK v2 Server ("complete" / "inputrequired") |
| Per-request meta | ✅ | io.modelcontextprotocol/ fields handled by MCP SDK v2 |
| resources/templates/list | ✅ | URI template resources with pagination |
| subscriptions/listen | ✅ | MCP 2.0 stream-based subscription pattern with filter + acknowledgment |
| x-mcp-header | ✅ | .withHeaderParam() on FluentToolBuilder — parameter mirroring to HTTP headers |
| title & icons | ✅ | Tool.title, BaseModel.title, Icon domain model, createIcon() |
| resourcelink | ✅ | Content type in tool results and prompt messages |
| JSON Schema 2020-12 | ✅ | Default dialect enforced by MCP SDK v2 |
| Error codes (-32020–-32022) | ✅ | HeaderMismatch, MissingRequiredClientCapability, UnsupportedProtocolVersion |
| Protocol version | ✅ | Defaults to 2026-07-28 in all server metadata (Server Card, introspection) |
### Deprecated Features (mirrored from MCP 2.0)
All features deprecated by MCP 2.0 (SEP-2577 / SEP-2596) are deprecated in MCP Fusion with @deprecated markers and migration guidance. They remain functional during the deprecation window (earliest removal: 2027-07-28).
| Deprecated Feature | Migration Path |
| Roots | Pass directories/files via tool parameters, resource URIs, or server configuration |
| Sampling | Integrate directly with LLM provider APIs |
| Logging (notifications/message) | Log to stderr for stdio; use OpenTelemetry (TelemetrySink / DebugObserver) |
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/vinkius-labs-mcpfusion/)
- Source
- awesome · https://github.com/vinkius-labs/mcpfusion
- Browse by field
- MCP servers
- Listed by
- 10 independent sources
- added
- today
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.