diff --git a/.env.example b/.env.example index ee0304c..1623c81 100644 --- a/.env.example +++ b/.env.example @@ -13,6 +13,9 @@ BETTER_AUTH_SECRET=replace-me-with-32-bytes-of-random-hex-1234567890abcdef BETTER_AUTH_URL=http://localhost:3001 NEXT_PUBLIC_APP_URL=http://localhost:3001 NEXT_PUBLIC_API_URL=http://localhost:4000 +# Google Search Console HTML-tag verification token (content attribute only). +# Leave empty in dev; set in production, then submit /sitemap.xml in GSC. +NEXT_PUBLIC_GSC_VERIFICATION= # ---- GitHub OAuth ("Continue with GitHub") ---- # Create at https://github.com/settings/applications/new diff --git a/apps/web/app/(marketing)/contact/layout.tsx b/apps/web/app/(marketing)/contact/layout.tsx new file mode 100644 index 0000000..d2bd259 --- /dev/null +++ b/apps/web/app/(marketing)/contact/layout.tsx @@ -0,0 +1,15 @@ +import { pageMetadata } from '@/lib/seo'; +import type { ReactNode } from 'react'; + +// The contact page itself is a client component ('use client'), which cannot +// export metadata — so the canonical/description live here. +export const metadata = pageMetadata({ + title: 'Contact', + description: + 'Get in touch with the BuildMyMCPServer team — support, sales and security questions answered by email.', + path: '/contact', +}); + +export default function ContactLayout({ children }: { children: ReactNode }) { + return children; +} diff --git a/apps/web/app/(marketing)/guides/article-shell.tsx b/apps/web/app/(marketing)/guides/article-shell.tsx index e4e5823..32ade55 100644 --- a/apps/web/app/(marketing)/guides/article-shell.tsx +++ b/apps/web/app/(marketing)/guides/article-shell.tsx @@ -71,3 +71,33 @@ export function UL({ children }: { children: ReactNode }) { export function Strong({ children }: { children: ReactNode }) { return {children}; } + +export function OL({ children }: { children: ReactNode }) { + return ( +
    + {children} +
+ ); +} + +/** Comparison / feature tables. Pass fully-formed / children; + * the wrapper provides the horizontal-scroll container so wide tables never + * break the mobile viewport. */ +export function Table({ children }: { children: ReactNode }) { + return ( +
+ + {children} +
+
+ ); +} + +/** Callout for caveats and version-sensitive facts. */ +export function Note({ children }: { children: ReactNode }) { + return ( +
+ {children} +
+ ); +} diff --git a/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/opengraph-image.tsx b/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/opengraph-image.tsx new file mode 100644 index 0000000..09757a1 --- /dev/null +++ b/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/opengraph-image.tsx @@ -0,0 +1,13 @@ +import { articleOgImage, OG_SIZE } from '@/lib/og-article'; + +export const runtime = 'edge'; +export const alt = 'How to host a remote MCP server with OAuth (2026)'; +export const size = OG_SIZE; +export const contentType = 'image/png'; + +export default function Image() { + return articleOgImage({ + title: 'How to host a remote MCP server with OAuth (2026)', + tag: 'Guide', + }); +} diff --git a/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/page.tsx b/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/page.tsx index 1aa8361..f23a4be 100644 --- a/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/page.tsx +++ b/apps/web/app/(marketing)/guides/host-mcp-server-with-oauth/page.tsx @@ -1,5 +1,5 @@ import { JsonLd } from '@/components/json-ld'; -import { articleJsonLd, pageMetadata } from '@/lib/seo'; +import { articleJsonLd, breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; import Link from 'next/link'; import { ArticleShell, H2, P, Strong, UL } from '../article-shell'; @@ -21,6 +21,13 @@ export default function Page() { datePublished: '2026-05-31', })} /> + + + +

MCP guides

Hosting, auth and shipping for Model Context Protocol servers — written for people building real tools, not demos.

- {GUIDES.map((g) => ( + {guides.map((g) => ( - - {g.tag} - +
+ + {g.tag} + + + {new Date(g.dateModified ?? g.datePublished).toLocaleDateString('en-US', { + year: 'numeric', + month: 'short', + day: 'numeric', + })} + +

{g.title}

diff --git a/apps/web/app/docs/api-reference/page.tsx b/apps/web/app/docs/api-reference/page.tsx index 747b65e..e6c9aa7 100644 --- a/apps/web/app/docs/api-reference/page.tsx +++ b/apps/web/app/docs/api-reference/page.tsx @@ -6,12 +6,26 @@ import { DocsCode, Mono, } from '@/components/docs-page'; +import { JsonLd } from '@/components/json-ld'; +import { breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'API reference — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'API reference', + description: + 'REST API reference for the BuildMyMCPServer control plane — auth, server CRUD, build streaming, templates and the OAuth 2.1 endpoints.', + path: '/docs/api-reference', +}); export default function ApiReference() { return ( <> + API reference Every endpoint on the control plane. Authenticated routes use the session cookie set by diff --git a/apps/web/app/docs/authoring/page.tsx b/apps/web/app/docs/authoring/page.tsx index ff735e2..5f00af1 100644 --- a/apps/web/app/docs/authoring/page.tsx +++ b/apps/web/app/docs/authoring/page.tsx @@ -8,12 +8,26 @@ import { DocsCode, Mono, } from '@/components/docs-page'; +import { JsonLd } from '@/components/json-ld'; +import { breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'Authoring tools — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'Authoring tools', + description: + 'How to write prompts that generate good MCP tools — naming, input schemas, credentials, and how the generated TypeScript is checked before it ships.', + path: '/docs/authoring', +}); export default function Authoring() { return ( <> + Authoring tools What you write in the prompt is what Claude turns into TypeScript. Better prompts mean diff --git a/apps/web/app/docs/concepts/page.tsx b/apps/web/app/docs/concepts/page.tsx index a33cf4d..0fb6a71 100644 --- a/apps/web/app/docs/concepts/page.tsx +++ b/apps/web/app/docs/concepts/page.tsx @@ -8,12 +8,26 @@ import { DocsCode, Mono, } from '@/components/docs-page'; +import { JsonLd } from '@/components/json-ld'; +import { breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'MCP concepts — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'MCP concepts', + description: + 'What Model Context Protocol is: tools, resources and prompts, the Streamable HTTP transport, and how a client discovers and calls a server.', + path: '/docs/concepts', +}); export default function Concepts() { return ( <> + MCP concepts Model Context Protocol is an open standard from Anthropic for connecting AI assistants to diff --git a/apps/web/app/docs/faq/page.tsx b/apps/web/app/docs/faq/page.tsx index 12e796f..2afd523 100644 --- a/apps/web/app/docs/faq/page.tsx +++ b/apps/web/app/docs/faq/page.tsx @@ -1,6 +1,13 @@ import { DocsTitle, DocsLead, DocsH2, DocsP, Mono } from '@/components/docs-page'; +import { JsonLd } from '@/components/json-ld'; +import { breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'FAQ — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'Docs FAQ', + description: + 'Answers on generated-code safety, secrets handling, build failures, quotas and self-hosting for BuildMyMCPServer.', + path: '/docs/faq', +}); const ITEMS: { q: string; a: React.ReactNode }[] = [ { @@ -56,6 +63,13 @@ const ITEMS: { q: string; a: React.ReactNode }[] = [ export default function Faq() { return ( <> + FAQ Common questions, direct answers.
diff --git a/apps/web/app/docs/oauth/page.tsx b/apps/web/app/docs/oauth/page.tsx index 25bf7d1..fb31430 100644 --- a/apps/web/app/docs/oauth/page.tsx +++ b/apps/web/app/docs/oauth/page.tsx @@ -8,12 +8,26 @@ import { DocsCode, Mono, } from '@/components/docs-page'; +import { JsonLd } from '@/components/json-ld'; +import { breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'OAuth 2.1 flow — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'OAuth 2.1 flow', + description: + 'How every generated MCP server is protected: OAuth 2.1 with PKCE, Dynamic Client Registration (RFC 7591) and Resource Indicators (RFC 8707), walked through request by request.', + path: '/docs/oauth', +}); export default function OAuthDocs() { return ( <> + OAuth 2.1 flow Every generated server is an OAuth 2.1 Resource Server. The control plane is the diff --git a/apps/web/app/docs/page.tsx b/apps/web/app/docs/page.tsx index 6179ff4..2833b5e 100644 --- a/apps/web/app/docs/page.tsx +++ b/apps/web/app/docs/page.tsx @@ -9,8 +9,14 @@ import { DocsCode, Mono, } from '@/components/docs-page'; +import { pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'Quickstart — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'Quickstart', + description: + 'From first prompt to a live OAuth-protected MCP server in five minutes — sign in, describe your tool, confirm the plan, watch the build stream, install in your client.', + path: '/docs', +}); export default function Quickstart() { return ( diff --git a/apps/web/app/docs/self-hosting/page.tsx b/apps/web/app/docs/self-hosting/page.tsx index fd1960f..59b8d15 100644 --- a/apps/web/app/docs/self-hosting/page.tsx +++ b/apps/web/app/docs/self-hosting/page.tsx @@ -8,12 +8,26 @@ import { DocsCode, Mono, } from '@/components/docs-page'; +import { JsonLd } from '@/components/json-ld'; +import { breadcrumbJsonLd, pageMetadata } from '@/lib/seo'; -export const metadata = { title: 'Self-hosting — BuildMyMCPServer docs' }; +export const metadata = pageMetadata({ + title: 'Self-hosting', + description: + 'Run the BuildMyMCPServer control plane yourself — bring your own Postgres, Redis and Docker host, plus the production sandboxing flags for generated containers.', + path: '/docs/self-hosting', +}); export default function SelfHosting() { return ( <> + Self-hosting The control plane and generator are open. Bring your own Postgres, Redis, Docker host and diff --git a/apps/web/app/feed.xml/route.ts b/apps/web/app/feed.xml/route.ts new file mode 100644 index 0000000..91ee926 --- /dev/null +++ b/apps/web/app/feed.xml/route.ts @@ -0,0 +1,54 @@ +import { articlesNewestFirst } from '@/lib/articles'; +import { SITE_DESCRIPTION, SITE_NAME, SITE_URL } from '@/lib/seo'; + +export const dynamic = 'force-static'; + +function escapeXml(s: string): string { + return s + .replaceAll('&', '&') + .replaceAll('<', '<') + .replaceAll('>', '>') + .replaceAll('"', '"') + .replaceAll("'", '''); +} + +export function GET(): Response { + const articles = articlesNewestFirst(); + const lastBuildDate = new Date( + articles[0]?.dateModified ?? articles[0]?.datePublished ?? '2026-05-31', + ).toUTCString(); + + const items = articles + .map((a) => { + const url = `${SITE_URL}/guides/${a.slug}`; + return ` + ${escapeXml(a.title)} + ${url} + ${url} + ${escapeXml(a.description)} + ${new Date(a.datePublished).toUTCString()} + `; + }) + .join('\n'); + + const xml = ` + + + ${escapeXml(`${SITE_NAME} — MCP guides`)} + ${SITE_URL}/guides + + ${escapeXml(SITE_DESCRIPTION)} + en + ${lastBuildDate} +${items} + + +`; + + return new Response(xml, { + headers: { + 'content-type': 'application/rss+xml; charset=utf-8', + 'cache-control': 'public, max-age=3600', + }, + }); +} diff --git a/apps/web/app/layout.tsx b/apps/web/app/layout.tsx index cda63ca..4808476 100644 --- a/apps/web/app/layout.tsx +++ b/apps/web/app/layout.tsx @@ -26,7 +26,15 @@ export const metadata: Metadata = { authors: [{ name: SITE_NAME }], creator: SITE_NAME, publisher: SITE_NAME, - alternates: { canonical: '/' }, + alternates: { + canonical: '/', + types: { 'application/rss+xml': [{ url: '/feed.xml', title: `${SITE_NAME} — MCP guides` }] }, + }, + // Google Search Console ownership token. Unset in dev; set in production so + // the sitemap can be submitted and indexing monitored. + ...(process.env.NEXT_PUBLIC_GSC_VERIFICATION + ? { verification: { google: process.env.NEXT_PUBLIC_GSC_VERIFICATION } } + : {}), openGraph: { type: 'website', locale: 'en_US', diff --git a/apps/web/app/sitemap.ts b/apps/web/app/sitemap.ts index a1ead88..ebf5c33 100644 --- a/apps/web/app/sitemap.ts +++ b/apps/web/app/sitemap.ts @@ -1,3 +1,4 @@ +import { ARTICLES } from '@/lib/articles'; import { SITE_URL } from '@/lib/seo'; import { fetchPublicTemplateSlugs } from '@/lib/templates-server'; import type { MetadataRoute } from 'next'; @@ -6,48 +7,67 @@ type Entry = { path: string; priority: number; changeFrequency: MetadataRoute.Sitemap[number]['changeFrequency']; + /** Real last-substantive-change date. Bump when the page meaningfully changes. */ + lastModified: string; }; +// lastModified must reflect actual content changes — Google discounts sitemaps +// whose lastmod is always "now". Bump a route's date when you edit its page. const ROUTES: Entry[] = [ - { path: '/', priority: 1.0, changeFrequency: 'weekly' }, - { path: '/pricing', priority: 0.9, changeFrequency: 'weekly' }, - { path: '/templates', priority: 0.9, changeFrequency: 'daily' }, - { path: '/guides', priority: 0.8, changeFrequency: 'weekly' }, - { path: '/guides/host-mcp-server-with-oauth', priority: 0.8, changeFrequency: 'monthly' }, - { path: '/guides/hosted-mcp-platforms-compared', priority: 0.8, changeFrequency: 'monthly' }, - { path: '/guides/mintmcp-alternative', priority: 0.7, changeFrequency: 'monthly' }, - { path: '/docs', priority: 0.8, changeFrequency: 'weekly' }, - { path: '/docs/concepts', priority: 0.7, changeFrequency: 'monthly' }, - { path: '/docs/oauth', priority: 0.7, changeFrequency: 'monthly' }, - { path: '/docs/authoring', priority: 0.7, changeFrequency: 'monthly' }, - { path: '/docs/api-reference', priority: 0.7, changeFrequency: 'monthly' }, - { path: '/docs/self-hosting', priority: 0.7, changeFrequency: 'monthly' }, - { path: '/docs/faq', priority: 0.6, changeFrequency: 'monthly' }, - { path: '/changelog', priority: 0.6, changeFrequency: 'weekly' }, - { path: '/security', priority: 0.5, changeFrequency: 'monthly' }, - { path: '/status', priority: 0.4, changeFrequency: 'weekly' }, - { path: '/privacy', priority: 0.3, changeFrequency: 'yearly' }, - { path: '/terms', priority: 0.3, changeFrequency: 'yearly' }, + { path: '/', priority: 1.0, changeFrequency: 'weekly', lastModified: '2026-07-08' }, + { path: '/pricing', priority: 0.9, changeFrequency: 'weekly', lastModified: '2026-07-08' }, + { path: '/templates', priority: 0.9, changeFrequency: 'daily', lastModified: '2026-07-08' }, + { path: '/guides', priority: 0.8, changeFrequency: 'weekly', lastModified: '2026-07-08' }, + { path: '/docs', priority: 0.8, changeFrequency: 'weekly', lastModified: '2026-07-08' }, + { path: '/docs/concepts', priority: 0.7, changeFrequency: 'monthly', lastModified: '2026-07-08' }, + { path: '/docs/oauth', priority: 0.7, changeFrequency: 'monthly', lastModified: '2026-07-08' }, + { path: '/docs/authoring', priority: 0.7, changeFrequency: 'monthly', lastModified: '2026-07-08' }, + { + path: '/docs/api-reference', + priority: 0.7, + changeFrequency: 'monthly', + lastModified: '2026-07-08', + }, + { + path: '/docs/self-hosting', + priority: 0.7, + changeFrequency: 'monthly', + lastModified: '2026-07-08', + }, + { path: '/docs/faq', priority: 0.6, changeFrequency: 'monthly', lastModified: '2026-07-08' }, + { path: '/changelog', priority: 0.6, changeFrequency: 'weekly', lastModified: '2026-06-11' }, + { path: '/security', priority: 0.5, changeFrequency: 'monthly', lastModified: '2026-06-04' }, + { path: '/contact', priority: 0.4, changeFrequency: 'yearly', lastModified: '2026-06-04' }, + { path: '/status', priority: 0.4, changeFrequency: 'weekly', lastModified: '2026-06-04' }, + { path: '/privacy', priority: 0.3, changeFrequency: 'yearly', lastModified: '2026-06-29' }, + { path: '/terms', priority: 0.3, changeFrequency: 'yearly', lastModified: '2026-06-29' }, ]; export default async function sitemap(): Promise { - const now = new Date(); const staticEntries: MetadataRoute.Sitemap = ROUTES.map((r) => ({ url: `${SITE_URL}${r.path}`, - lastModified: now, + lastModified: new Date(r.lastModified), changeFrequency: r.changeFrequency, priority: r.priority, })); + // Guide articles come from the single registry, with their true dates. + const guideEntries: MetadataRoute.Sitemap = ARTICLES.map((a) => ({ + url: `${SITE_URL}/guides/${a.slug}`, + lastModified: new Date(a.dateModified ?? a.datePublished), + changeFrequency: 'monthly', + priority: 0.8, + })); + // Marketplace templates — each public template is its own indexable page. // Best-effort: if the API is unreachable the static entries still ship. const slugs = await fetchPublicTemplateSlugs(); const templateEntries: MetadataRoute.Sitemap = slugs.map((slug) => ({ url: `${SITE_URL}/templates/${slug}`, - lastModified: now, + lastModified: new Date('2026-07-08'), changeFrequency: 'weekly', priority: 0.6, })); - return [...staticEntries, ...templateEntries]; + return [...staticEntries, ...guideEntries, ...templateEntries]; } diff --git a/apps/web/lib/articles.ts b/apps/web/lib/articles.ts new file mode 100644 index 0000000..1924540 --- /dev/null +++ b/apps/web/lib/articles.ts @@ -0,0 +1,53 @@ +// Single registry for all /guides/* articles. The guides index, sitemap and +// RSS feed all render from this list, so adding an article here is the only +// bookkeeping step a new guide page needs besides its own directory. + +export interface Article { + slug: string; + title: string; + description: string; + /** Short badge shown on the index card, e.g. "Guide", "Comparison". */ + tag: string; + /** ISO date the article first shipped. */ + datePublished: string; + /** ISO date of last substantive edit. Defaults to datePublished. */ + dateModified?: string; +} + +export const ARTICLES: Article[] = [ + { + slug: 'host-mcp-server-with-oauth', + title: 'How to host a remote MCP server with OAuth (2026)', + description: + 'Streamable HTTP, OAuth 2.1, PKCE and Resource Indicators — what it actually takes to put a remote MCP server in production, and the shortcuts.', + tag: 'Guide', + datePublished: '2026-05-31', + }, + { + slug: 'hosted-mcp-platforms-compared', + title: 'Hosted MCP platforms compared: Cloudflare, Smithery, Composio & generating your own', + description: + 'The MCP hosting landscape splits into four categories. Which one fits depends on whether you have a server already, need a catalog, or need bespoke logic.', + tag: 'Comparison', + datePublished: '2026-05-31', + }, + { + slug: 'mintmcp-alternative', + title: 'MintMCP alternative: generate and host a custom MCP server', + description: + 'MintMCP wraps an existing STDIO server into a remote one. If you do not have a server yet, here is the generate-from-a-prompt route — and where MintMCP still wins.', + tag: 'Alternative', + datePublished: '2026-05-31', + }, +]; + +export function articleBySlug(slug: string): Article | undefined { + return ARTICLES.find((a) => a.slug === slug); +} + +/** Articles newest-first, for the index page and the RSS feed. */ +export function articlesNewestFirst(): Article[] { + return [...ARTICLES].sort((a, b) => + (b.dateModified ?? b.datePublished).localeCompare(a.dateModified ?? a.datePublished), + ); +} diff --git a/apps/web/lib/og-article.tsx b/apps/web/lib/og-article.tsx new file mode 100644 index 0000000..579a393 --- /dev/null +++ b/apps/web/lib/og-article.tsx @@ -0,0 +1,118 @@ +import { ImageResponse } from 'next/og'; + +// Shared Open Graph card for /guides/* articles. Each guide directory ships a +// tiny opengraph-image.tsx that calls this with its title + tag — the design +// stays consistent and Google Discover gets a ≥1200px image per article. + +export const OG_SIZE = { width: 1200, height: 630 }; + +export function articleOgImage(opts: { title: string; tag: string }): ImageResponse { + return new ImageResponse( +
+ {/* Indigo→cyan accent bar along the top edge */} +
+ +
+
+
+ M +
+
+ BuildMyMCPServer +
+
+
+ {opts.tag} +
+
+ +
60 ? '56px' : '66px', + fontWeight: 700, + lineHeight: 1.08, + letterSpacing: '-0.03em', + maxWidth: '1000px', + }} + > + {opts.title} +
+ +
+
+
+ MCP guides +
+
buildmymcpserver.com/guides
+
+
, + { ...OG_SIZE }, + ); +} diff --git a/apps/web/lib/seo.ts b/apps/web/lib/seo.ts index ae807a5..ab826bb 100644 --- a/apps/web/lib/seo.ts +++ b/apps/web/lib/seo.ts @@ -97,6 +97,8 @@ const SOFTWARE_FEATURES = [ 'Self-hostable control plane with BYO Postgres and Redis', ]; +// Enterprise is deliberately absent: its price is "Custom" and schema.org +// Offers with fabricated numeric prices are exactly what commit ee4713f purged. const OFFERS = [ { name: 'Hobby', @@ -114,12 +116,6 @@ const OFFERS = [ price: '199', description: '25 servers, 10M tool calls/month, audit log, shared Slack support.', }, - { - name: 'Enterprise', - price: '499', - description: - 'Unlimited servers; custom infrastructure and data residency on request; dedicated hosting and SSO/SAML scoped per contract; customer success.', - }, ]; /** Organization + WebSite + SoftwareApplication graph — emitted sitewide. */ @@ -191,7 +187,17 @@ export function articleJsonLd(opts: { path: string; datePublished: string; dateModified?: string; + /** + * Absolute or site-relative image URL. Defaults to the route's generated + * opengraph-image (1200×630), which satisfies Google Discover's large-image + * requirement once the route ships an opengraph-image.tsx. + */ + image?: string; + /** Named human author. Falls back to the Organization. */ + authorName?: string; + wordCount?: number; }): object { + const image = opts.image ?? `${SITE_URL}${opts.path}/opengraph-image`; return { '@context': 'https://schema.org', '@type': 'TechArticle', @@ -199,11 +205,29 @@ export function articleJsonLd(opts: { description: opts.description, url: `${SITE_URL}${opts.path}`, mainEntityOfPage: { '@type': 'WebPage', '@id': `${SITE_URL}${opts.path}` }, + image: image.startsWith('http') ? image : `${SITE_URL}${image}`, datePublished: opts.datePublished, dateModified: opts.dateModified ?? opts.datePublished, inLanguage: 'en', - author: { '@id': `${SITE_URL}/#organization` }, + author: opts.authorName + ? { '@type': 'Person', name: opts.authorName } + : { '@id': `${SITE_URL}/#organization` }, publisher: { '@id': `${SITE_URL}/#organization` }, + ...(opts.wordCount ? { wordCount: opts.wordCount } : {}), + }; +} + +/** BreadcrumbList structured data. Pass the trail from root to current page. */ +export function breadcrumbJsonLd(trail: { name: string; path: string }[]): object { + return { + '@context': 'https://schema.org', + '@type': 'BreadcrumbList', + itemListElement: trail.map((crumb, i) => ({ + '@type': 'ListItem', + position: i + 1, + name: crumb.name, + item: `${SITE_URL}${crumb.path}`, + })), }; } diff --git a/apps/web/public/llms-full.txt b/apps/web/public/llms-full.txt new file mode 100644 index 0000000..68de078 --- /dev/null +++ b/apps/web/public/llms-full.txt @@ -0,0 +1,91 @@ +# BuildMyMCPServer — full documentation + +> Turn a natural-language prompt into a hosted, OAuth 2.1-protected Model Context Protocol (MCP) server in about 60 seconds. This file condenses the full documentation at https://buildmymcpserver.com/docs for LLM consumption. See https://buildmymcpserver.com/llms.txt for the short index. + +## Quickstart (https://buildmymcpserver.com/docs) + +Describe the tool you want, paste in any credentials, watch the build stream, copy a snippet into your AI client. Five minutes from first prompt to a live OAuth-protected MCP server. + +Prerequisites: an MCP-capable AI client (Claude Desktop, Cursor, ChatGPT Custom Connectors, VS Code Copilot, Continue.dev) and API credentials for whatever the server should access — or pick the echo example to skip credentials. + +1. **Sign in** to the dashboard. +2. **Describe your tool** in plain language. Example prompt: "Search and read pages from our Notion workspace via the Notion API. Tools: search_pages(query), get_page_content(page_id). Auth: NOTION_API_KEY." +3. **Confirm the plan.** The wizard shows which tools were parsed from the prompt, the input schemas, and which credentials are needed. Everything is editable before the build starts. +4. **Watch the build stream** over WebSocket through five states: queued → generating (Claude returns the spec) → building (TypeScript rendered, static checks, Docker image) → deploying (container boot) → live (endpoint responds, OAuth gate active). +5. **Install in your client.** The Done screen shows copy-ready snippets for Claude Desktop, Cursor and ChatGPT. The OAuth handshake runs automatically on the first tool call. + +Example client config: + + { + "mcpServers": { + "notion-reader": { + "url": "https://.mcp.buildmymcpserver.com/mcp", + "auth": "oauth2" + } + } + } + +## MCP concepts (https://buildmymcpserver.com/docs/concepts) + +Model Context Protocol is an open standard from Anthropic for connecting AI assistants to external tools, data and APIs. Three primitives, one transport: + +- **Tools** — functions the AI can invoke. Each has a name, description, input schema (JSON Schema/Zod) and a server-side implementation. The AI decides when to call them based on the description. +- **Resources** — read-only, URI-addressed data the AI can fetch (files, documents, database records). +- **Prompts** — parameterized prompt templates the server exposes to encourage specific orchestration patterns. + +**Transport: Streamable HTTP.** Every generated server speaks Streamable HTTP (MCP spec 2025-11-25). The older SSE transport was deprecated in June 2025 and is not supported. One HTTP endpoint at /mcp, optionally negotiating a long-lived text/event-stream when the server pushes updates. + +**Session lifecycle:** initialize (client sends protocol version + capabilities; server assigns a session id via the mcp-session-id header) → notifications/initialized → tools/list, tools/call, resources/list, prompts/list. + +**Why MCP and not just REST:** REST APIs need bespoke OpenAPI integration per client. MCP standardizes discovery, invocation, auth and streaming, so any spec-compliant client picks up any spec-compliant server with zero glue code. + +## OAuth 2.1 flow (https://buildmymcpserver.com/docs/oauth) + +Every generated server is an OAuth 2.1 Resource Server; the control plane is the Authorization Server. Standards implemented: + +- OAuth 2.1 draft (draft-ietf-oauth-v2-1) — no implicit flow, mandatory PKCE +- RFC 8414 — Authorization Server Metadata +- RFC 9728 — Protected Resource Metadata +- RFC 8707 — Resource Indicators (audience binding) +- RFC 7591 — Dynamic Client Registration + +End-to-end: the first unauthenticated request gets a 401 with a WWW-Authenticate header pointing at the server's protected-resource metadata. The client fetches it, discovers the authorization server, registers itself dynamically (no human in the loop; each AI surface gets its own ephemeral client identity), then runs Authorization Code + PKCE. The user consents, the client exchanges the code for an RS256-signed JWT bound to the specific server's resource URL. The runner verifies signature (against the AS JWKS), issuer, audience and expiry on every call. No token passthrough — the runner never forwards the client's token to a downstream API. + +Why audience binding matters: without RFC 8707, a token issued for one customer's MCP server could be replayed against another customer's server. + +## Authoring tools (https://buildmymcpserver.com/docs/authoring) + +What you write in the prompt is what Claude turns into TypeScript. Rules the generator enforces on generated code: + +- No eval, no new Function, no child_process — static checks reject the build. +- No import statements in tool bodies; the runtime injects fetch, pg and z (Zod). +- Secrets live in process.env, never embedded literally. +- External HTTP calls must use AbortSignal.timeout (default 10s). +- Database access via pg with parameterized queries only. +- Errors return as MCP error-content, not thrown exceptions. + +Prompt patterns that work: be explicit about tool names ("Tool: search_pages(query)"); name the credentials ("Auth: NOTION_API_KEY"); flag destructive tools so clients can warn; one server per integration rather than one server per tool. + +Iteration: open the server's Iterate tab, describe the change, a new build version is queued and rolling-deployed — the old version stays live until the new one is healthy. + +## Self-hosting (https://buildmymcpserver.com/docs/self-hosting) + +The control plane and generator are open. Requirements: Node.js 20+, pnpm 9+, a Docker engine reachable from the generator, Postgres 16+, Redis 7+, and an Anthropic API key (optional — a mock generator covers offline dev). + +Key environment variables: DATABASE_URL, REDIS_URL, ANTHROPIC_API_KEY, SECRETS_ENCRYPTION_KEY (32-byte hex AES-256-GCM key), CONTROL_PLANE_PUBLIC_URL (OAuth issuer), OAUTH_KEY_DIR (RS256 keypair), RUNNER_PORT_RANGE_START/END (host-port window for generated containers). + +Production container sandboxing flags: --read-only, --cap-drop=ALL, --security-opt=no-new-privileges, --cpus=0.5 --memory=512m. + +## FAQ highlights (https://buildmymcpserver.com/docs/faq) + +- **How does LLM-generated code stay safe?** Three layers: strict Zod validation of the JSON spec, a regex scan for banned tokens (eval, child_process, prompt-injection markers), and a static check on the rendered TypeScript before the Docker build. Any failure stops the deploy. +- **What if Claude generates a broken tool?** The build fails at static-check or Docker-build stage; the user sees the exact error in the live log, refines the prompt and rebuilds. No invalid server serves traffic. +- **Do secrets leave the environment?** No. AES-256-GCM encrypted at rest, decrypted only when injected into the container at boot. Never in audit logs, build logs, or prompts sent to Claude. +- **No API key?** The generator falls back to a deterministic mock spec (echo + now tools) so the full pipeline can be verified without credits. + +## Pricing (https://buildmymcpserver.com/pricing) + +- Hobby: €0 — 1 server, 100,000 tool calls/month, community support. +- Pro: €49/month — 5 servers, 1M tool calls/month, priority build queue, email support. Custom domains on the roadmap. +- Team: €199/month — 25 servers, 10M tool calls/month, audit log, Slack support. RBAC on the roadmap. +- Enterprise: custom — unlimited servers; infrastructure, data residency, SSO/SAML scoped per contract. diff --git a/apps/web/public/llms.txt b/apps/web/public/llms.txt index 0819e39..59f2731 100644 --- a/apps/web/public/llms.txt +++ b/apps/web/public/llms.txt @@ -19,22 +19,39 @@ The workflow: - **OAuth 2.1 authorization server** — PKCE, Dynamic Client Registration (RFC 7591), Resource Indicators (RFC 8707), RS256 JWKS. - **Streamable HTTP transport** — the modern MCP transport, compatible with every major MCP client. - **Per-server isolation** — each generated server runs in its own Docker container. -- **Encrypted secrets** — customer credentials are stored with AES-256-GCM envelope encryption and injected only at runtime; never logged. +- **Encrypted secrets** — customer credentials are stored with AES-256-GCM encryption and injected only at runtime; never logged. - **Template marketplace** — publish a server you built as a template, or fork one someone else published and add your own credentials. - **Source export** — export the full TypeScript source of any server. No vendor lock-in. - **Self-hostable** — the runner is a plain Docker container; the control plane runs against your own Postgres and Redis. ## Pricing -- **Hobby** — free. 1 server, 100k tool calls/month. -- **Pro** — €49/month. 5 servers, 1M tool calls/month, custom domain, priority build queue. -- **Team** — €149/month. 25 servers, 10M tool calls/month, RBAC, audit log, 99.9% SLA. -- **Enterprise** — from €499/month. Unlimited servers, bring-your-own-cloud, SSO/SAML. +- **Hobby** — €0, forever free. 1 MCP server, 100,000 tool calls/month, BuildMyMCP subdomain, community support. +- **Pro** — €49/month. 5 MCP servers, 1M tool calls/month, priority build queue, email support. Custom domains are on the roadmap (not shipped yet). +- **Team** — €199/month. 25 MCP servers, 10M tool calls/month, audit log, shared Slack channel support. RBAC is on the roadmap (not shipped yet). +- **Enterprise** — custom pricing. Unlimited servers; custom infrastructure, data residency, dedicated hosting and SSO/SAML scoped per contract. + +Full details: https://buildmymcpserver.com/pricing ## Docs +- Quickstart: https://buildmymcpserver.com/docs - Concepts: https://buildmymcpserver.com/docs/concepts - OAuth: https://buildmymcpserver.com/docs/oauth - Authoring servers: https://buildmymcpserver.com/docs/authoring - API reference: https://buildmymcpserver.com/docs/api-reference - Self-hosting: https://buildmymcpserver.com/docs/self-hosting +- FAQ: https://buildmymcpserver.com/docs/faq + +## Guides + +- How to host a remote MCP server with OAuth (2026): https://buildmymcpserver.com/guides/host-mcp-server-with-oauth +- Hosted MCP platforms compared: https://buildmymcpserver.com/guides/hosted-mcp-platforms-compared +- MintMCP alternative: https://buildmymcpserver.com/guides/mintmcp-alternative + +## Optional + +- Full docs content in one file: https://buildmymcpserver.com/llms-full.txt +- Template marketplace: https://buildmymcpserver.com/templates +- Security posture: https://buildmymcpserver.com/security +- System status: https://buildmymcpserver.com/status