# Self-hosted MCP servers

> Give agents safe, scoped access to client systems. I've started hosting my own.

- Verdict: Use when it fits
- Vendor: Open standard
- Layer: [AI](https://cloudlesslabs.com/stack/layers/ai.md). Job: Agent integrations
- Last reviewed: 18 October 2026, by Nicolas Dao (Cloudless Labs, Sydney)
- Web page: https://cloudlesslabs.com/stack/mcp-servers/. The whole stack in one file: https://cloudlesslabs.com/stack/brief.md

Most vendors in this stack now ship an official MCP server: Cloudflare, GitHub, Stripe, Neon, Resend, PostHog, OpenRouter and more. Where they don't, I host my own.

## Use it when

- An agent needs controlled access to a system that has no official MCP server.

## Gotchas, with fixes

- **Gotcha:** Unofficial MCP packages can be malicious (the fake postmark-mcp BCC'd every email to an attacker).
  **Fix:** Use vendors' official servers, pin versions, and read the code of anything community-made.

## Where it fits

- [Building with AI agents](https://cloudlesslabs.com/stack/use-cases/ai-dev.md): pick 6. Scoped access to client systems.

## Related

- [AI](https://cloudlesslabs.com/stack/layers/ai.md): every tool in this layer, with its verdict
- [The whole stack in one file](https://cloudlesslabs.com/stack/brief.md): every use case and tool, for questions that span many
- [Map of every Markdown file on cloudlesslabs.com, with what each one answers](https://ask.cloudlesslabs.com)