MCP Sse Authenticated Cloud Run

🚀 Hosting MCP SSE Server on Google Cloud Run

As of March 4, 2024, MCP is still working on authentication and authorization issues. They plan to complete this feature in the first half of 2025. Currently, the problem is that I want to share my MCP server with my team immediately. So, we've found a solution here. As of March 4, 2024, the only direct way to use the MCP server in tools like Cursor is through network - layer solutions (e.g., proxies). Other features like basic authentication and API keys are not available for now.

By leveraging Google Cloud Run and user - based IAM authentication, I've created a simple and secure way to allow clients to access a custom MCP server over the internet.

MCP Roadmap

✨ Features

How It Works

The MCP server is hosted on Google Cloud Run. With Cloud Run's IAM authentication feature, we can securely connect the server to the internet by creating a proxy connection using the Google Cloud SDK.

🚀 Quick Start

If your environment is already configured with Docker and the gcloud CLI and only requires minimal setup, this solution should work out of the box.

Step 1: Update the deploy.sh file

Fill in information such as your project ID and service account email in deploy.sh.

Step 2: After successful deployment, get the URL provided by Cloud Run and add it to the mcp_proxy.ts file, along with your project ID.

Step 3: Run the proxy npx ts-node mcp_proxy.ts

Step 4: Access your MCP server via http://localhost:3030 and add it to Cursor's settings (remember to select SSE instead of command).

📚 Documentation

Clone the Repository

1. Clone this repository to your local environment.
2. Run npm install to install all dependencies.
3. Run npm run dev to start the server for local development.

Deploy to Google Cloud Run

To deploy your MCP server on Google Cloud Run:

1. Make sure you have installed Google Cloud SDK.
2. Update the project information in the deploy.sh script:
   • PROJECT_ID: Your Google Cloud project ID.
   • REGION: The GCP region you've chosen.
   • SERVICE_ACCOUNT_EMAIL: The email of the service account with appropriate permissions.
3. Run the deployment script:

   chmod +x deploy.sh
   ./deploy.sh
   

This script will perform the following actions:

• Build your MCP server container using Docker.
• Push it to Google Container Registry.
• Configure and deploy it to Cloud Run, enabling the authentication feature.

Connect to the Deployed MCP Server

To connect to your MCP server deployed on Google Cloud Run:

1. Run the proxy locally:

   npx ts-node mcp_proxy.ts
   

2. Open your browser and access http://localhost:3030.

Configure the MCP Server in Cursor

To add the MCP server in Cursor, follow these steps:

1. Open Cursor's settings interface.
2. Add a new MCP server and enter the relevant URL and endpoint information.

Security Precautions

• Ensure that all sensitive information (e.g., API keys) is not stored in plain text in the code repository.
• Use IAM policies to restrict access to the Cloud Run service, ensuring that only authorized services and users can call it.

Troubleshooting Connection Issues

If you encounter connection issues, check the following:

1. Confirm that the proxy is running and that you can access http://localhost:3030 locally.
2. Check your network firewall settings to ensure that the port is not blocked.
3. Check the access logs of the Cloud Run service to confirm if there are any permission issues.

Contribution Information

We welcome contributions from the community! If you find any errors or have suggestions for improvement, please submit a GitHub issue or directly fork the repository and create a pull request.

📄 License

This project is licensed under the MIT License.

⚠️ Important Note

The image paths and examples in this document may need to be adjusted according to the actual project structure.