MCP guides

Practical walkthroughs for building, securing and publishing an MCP server against 2026-07-28. Every command was run against the live tooling and every normative claim links to the specification sentence behind it.

Build an MCP server in TypeScript

A conformant stateless server from scratch, with no framework.

Test a server against the spec

What the validator sends, how the grade is calculated, and what unrated means.

Generate a server

What each option changes, why the framework choices are disabled, and what you get.

Add OAuth to an MCP server

Resource-server auth: 401 challenge, RFC 9728 metadata, audience validation.

Publish to the official registry

Install, prove package ownership, authenticate, publish.

Verify a DNS namespace

Publish under your own domain — and get the TXT record on the apex.

What goes in server.json

Every field, required and optional, with the naming rules that reject publishes.

Looking for what changed rather than how to build? The spec explainers cover the revision itself. Already have a server that broke? Troubleshooting.