MCP Server Pack: 8 Tested, Secure MCP Servers in TypeScript

Name: MCP Server Pack: 8 Tested, Secure MCP Servers in TypeScript
Brand: CodeUpVik
Price: 9999 INR
Availability: InStock

Eight TypeScript MCP servers with one shared core and the same safety defaults: read-only until you allow writes, secrets only from the environment, tested security guards.

₹9,999

Get it customised as per your need

About this product

Connect Claude Desktop, Claude Code or Cursor to your real tools without building every MCP server from scratch. This pack contains eight TypeScript MCP servers that share one core and the same safety defaults. Every server is read-only until you set ALLOW_WRITES=true. Secrets come only from environment variables and are removed from outputs. Inputs are validated with zod. Each server has a rate limit, returns structured errors and logs to stderr, so the protocol channel stays clean. The security guards are tested: path traversal and symlink escapes, an SSRF guard that blocks private IPs and DNS rebinding, and a Postgres guard that refuses writes and runs every query in a read-only transaction with a timeout. Three of the servers are built for India: Razorpay, GSTIN checksum validation with exact CGST/SGST/IGST splits in paise, and CSV analysis. The pack includes full source, tests, install snippets and a threat model.

What's included

8 MCP servers: postgres-readonly, sqlite, files-sandbox, http-fetch, csv-analyst, razorpay, gst-tools, github-issues
Write tools (SQLite execute, file writes, Razorpay payment links, GitHub issues and comments) work only with ALLOW_WRITES=true
postgres-readonly: single-statement SQL guard, READ ONLY transaction, statement_timeout and a row cap
files-sandbox and csv-analyst: one root folder; ../, absolute and UNC paths and symlink/junction escapes are blocked
http-fetch: SSRF guard for localhost, private ranges, cloud metadata and DNS names that resolve to them; every redirect re-checked
gst-tools: GSTIN checksum, CGST+SGST/UTGST vs IGST, invoice totals in exact paise, offline HSN and SAC lookup
Streamable HTTP transport (token-protected) for gst-tools and github-issues; stdio for all 8
Test suite (vitest) with end-to-end tests using the official MCP SDK client; INSTALL.md, SECURITY.md threat model, Dockerfile

File formats

TypeScript source code
Delivered as one ZIP

Works with

Node.js 22.13 or newer
A Postgres database of your own for the live Postgres tests (the SQL guard is unit-tested without one)

Licence

Commercial licence: use in your own and your clients' projects. Full terms are in the LICENSE file inside the download.

Questions

How was it tested?

On 22 September 2026, 211 automated tests passed from the download on Windows, including end-to-end tests that start the built servers with the official MCP SDK client. The Razorpay and GitHub servers are tested against mocked APIs, not live accounts. The file-symlink escape test needs symlink permission, so it is skipped on a standard Windows account; the folder-junction escape test does run.

Is it affiliated with Anthropic, Cursor, Razorpay or GitHub?

No. Claude and Claude Code are trademarks of Anthropic, Cursor of Anysphere, and Razorpay and GitHub of their owners. This pack is not affiliated with or endorsed by any of them.

How do I get my file?

Right after payment you see a Download button on the payment page. Each link works for 10 minutes, so save the file straight away. If a link expires, write to us with your order ID for a new one.

Can I get a refund?

Digital products are final sale. If a download does not work, email us within 7 days of purchase with your order ID and a short screen recording. We send a working file within 2 working days, or refund you in full if we cannot. Read the refund policy

Is anything shipped?

No. Every product is a digital download. Nothing physical is shipped.

Is the payment secure?

Yes. Payments in India are processed by Cashfree, and payments from outside India by PayPal, each on its own secure checkout. We never see or store your card or bank details.

Paid, but no download?

Write to us with the order ID shown on the payment page and we will sort it out. [email protected]