apatureai/bastion

Overview

A remote MCP server that supports in-loop design review, and also serves as a worked reference for OAuth 2.1 authentication, SSRF-safe URL handling, and long-running jobs over MCP. It is written in TypeScript and intended as both a usable tool and a learning resource.

Best for

Best for
Developers building MCP servers who need reference implementations for auth, security, and long-running tasks

Use cases

• Integrate design review into an MCP-based workflow
• Reference OAuth 2.1 patterns for MCP server authentication
• Model SSRF-safe URL handling and long-running job patterns

How to use

Tools exposed

• design_review
• design_review_get
• design_recheck
• design_review_cancel
• design_review_panel_action

Tested with

Claude Code, Cursor, VS Code, ChatGPT

Notes

A remote MCP server that supports in-loop design review, and also serves as a worked reference for OAuth 2.1 authentication, SSRF-safe URL handling, and long-running jobs over MCP. It is written in TypeScript and intended as both a usable tool and a learning resource.

1 stars on GitHub. Last updated 2026-09-07. Licensed MIT.

Use cases

• Integrate design review into an MCP-based workflow
• Reference OAuth 2.1 patterns for MCP server authentication
• Model SSRF-safe URL handling and long-running job patterns

Pros

• Serves as a concrete reference for OAuth 2.1 and SSRF-safe URL handling
• Written in TypeScript, matching many MCP tooling stacks
• Addresses long-running jobs, a common MCP production concern

Cons

• Very early stage with only 1 star and minimal adoption
• Scope is narrow, focused on design review and reference patterns
• No evidence of production readiness or active maintenance

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.