Most vendors in this stack now ship an official MCP server: Cloudflare, GitHub, Stripe, Neon, Resend, PostHog, OpenRouter and more. Where they don't, I host my own.
Use it when
- An agent needs controlled access to a system that has no official MCP server.
Gotchas, with fixes
Gotcha: Unofficial MCP packages can be malicious (the fake postmark-mcp BCC'd every email to an attacker).
Fix: Use vendors' official servers, pin versions, and read the code of anything community-made.
Where it fits
- Building with AI agents: Pick 06.
Scoped access to client systems.
Last reviewed by Nicolas Dao