MCP Catalog
This repository keeps an MCP catalog, not MCP credentials. The catalog records
Purpose
This repository keeps an MCP catalog, not MCP credentials. The catalog records candidate integrations, safe defaults, and review posture for future AI tooling. It does not connect any MCP server and does not configure Cursor, Codex, Claude Desktop, Cline, LibreChat, Dify, or any other client.
Principles
- No token, secret, OAuth credential, account ID, or zone ID should be committed.
- Prefer official MCP servers when available.
- Use read-only permissions by default.
- Write-capable tools require explicit human approval and should not be enabled in early development.
- MCP configuration belongs in local client settings or managed infrastructure, not in this repository unless it is a non-secret template.
- Agents may suggest MCP candidates and scopes, but humans approve actual connections.
Recommended MCP Catalog
| Name | Provider | Purpose | Recommended permission | Suggested client | Status | Notes |
|---|---|---|---|---|---|---|
| Cloudflare Docs MCP | Cloudflare | Search official Cloudflare docs while editing deployment code. | Read-only docs | Cursor / Codex | Candidate, not wired | Prefer before changing Workers, Pages, Access, DNS, or Wrangler guidance. |
| Cloudflare GraphQL MCP | Cloudflare | Query analytics and account graph data. | Read-only analytics | Codex / Claude Desktop | Candidate, not wired | Do not expose account IDs in repo docs or examples. |
| Cloudflare Observability MCP | Cloudflare | Inspect Workers logs, traces, and metrics. | Read-only observability | Codex / Claude Desktop | Candidate, not wired | Future System Monitor input. |
| Cloudflare DNS Analytics MCP | Cloudflare | Review DNS query and traffic patterns. | Read-only analytics | Claude Desktop / Grafana | Candidate, not wired | No DNS mutation in early development. |
| Cloudflare Audit Logs MCP | Cloudflare | Review administrative changes. | Read-only audit logs | Claude Desktop / Codex | Candidate, not wired | Useful for security review and incident notes. |
| Cloudflare API MCP | Cloudflare | General Cloudflare API access. | Read-only initially | Codex / Cursor | Candidate, not wired | Write scopes require explicit human approval and a separate rollout. |
| GitHub MCP | GitHub | Inspect repositories, issues, pull requests, and CI context. | Read-only initially | Cursor / Codex | Candidate, not wired | Write actions stay human-approved. |
| PostHog MCP | PostHog | Read product analytics and funnels. | Read-only analytics | Codex / Claude Desktop | Candidate, not wired | Future Monitor and growth-report input. |
| Neon MCP | Neon | Inspect database projects, branches, and usage. | Carefully scoped read-only | Codex / Claude Desktop | Candidate, not wired | No production database writes through AI. |
| Sentry MCP | Sentry | Read errors, releases, and issue context. | Read-only observability | Codex / Claude Desktop | Candidate, not wired | Future reliability triage input. |
| Grafana MCP | Grafana | Read dashboards, metrics, and alerts. | Read-only observability | Grafana / Claude Desktop | Candidate, not wired | Use only after dashboard ownership is clear. |
| NocoDB MCP | NocoDB | Explore future lightweight data-table workflows. | Carefully scoped read-only | Codex / Claude Desktop | Candidate, not wired | Not a runtime database API. |
| OpenAI Docs MCP | OpenAI | Search official OpenAI API and product docs. | Read-only docs | Codex | Candidate, not wired | Use for OpenAI implementation questions only. |
| Prox OS MCP future | Prox OS | Expose app registry, docs, monitoring, and product events. | User-authorized scopes | Prox OS / external agents | Future product surface | Requires an explicit app/runtime permission model first. |
Initial Integration Strategy
Current phase:
- Do not wire MCP clients yet.
- Do not add
~/.cursor/mcp.jsonto this repository. - Do not add Claude Desktop local config to this repository.
- Do not commit API tokens.
- Do not grant write permissions.
Future priority:
- Phase 1: Cloudflare Docs, GraphQL, and Observability MCPs with read-only scopes.
- Phase 2: GitHub, Sentry, and PostHog MCPs with read-only scopes.
- Phase 3: Neon, Grafana, and NocoDB MCPs with carefully scoped read-only access.
- Phase 4: Prox OS exposes its own MCP server for app registry, docs, monitoring, and product events.
Client Notes
- Cursor / Codex: best fit for codebase development with repository context.
- Claude Desktop / Cowork: useful for desktop-level file tasks and multi-MCP analysis.
- Cline: useful for open-source VS Code agent and MCP experiments.
- LibreChat: potential future self-hosted multi-MCP chat control plane.
- Dify: useful for future workflows, RAG, and automatic reports, but not the current default chat entry.
Long-term Prox OS Direction
The long-term goal is to make Prox OS both an MCP client and an MCP server.
As an MCP client, Prox OS can read Cloudflare, GitHub, PostHog, Sentry, Neon, Grafana, and NocoDB through controlled adapters.
As an MCP server, Prox OS can expose app registry, docs, product events, monitoring summaries, and user-authorized workspace context to external AI agents.