Corben MCP Server

Give your AI agent superpowers. 220+ tools for building websites, sending email, managing contacts, invoicing, databases, automation, and more — all through one connection.

Works with Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-compatible client.

One-Line Install

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/gatordevin/corben-mcp/main/setup.sh | bash

Windows (PowerShell):

iwr -useb https://raw.githubusercontent.com/gatordevin/corben-mcp/main/setup.ps1 | iex

This will:

1. Install the MCP server to ~/.corben-mcp
2. Walk you through creating an account and getting an API key
3. Auto-detect your AI clients (Claude, Cursor, etc.)
4. Configure everything and connect

Or clone and run manually:

git clone https://github.com/gatordevin/corben-mcp.git
cd corben-mcp
npm install
./setup.sh          # macOS/Linux
.\setup.ps1         # Windows

Give This to Your Agent

Paste this into any AI agent chat to set it up:

macOS/Linux:

Run this command to install Corben MCP tools:
curl -fsSL https://raw.githubusercontent.com/gatordevin/corben-mcp/main/setup.sh | bash

Windows:

Run this command in PowerShell to install Corben MCP tools:
iwr -useb https://raw.githubusercontent.com/gatordevin/corben-mcp/main/setup.ps1 | iex

Or if the agent has terminal access, it can do it directly.

What You Get

Once connected, your AI agent can:

220+ tools total — the full list is dynamically loaded from the API.

How It Works

Your AI ←→ MCP Protocol (stdio) ←→ Corben MCP Server ←→ HTTPS ←→ Corben API

The MCP server acts as a bridge. Your AI client talks to it over the standard MCP protocol, and it securely proxies requests to the Corben API.

Security

This implements the security model recommended by NIST SP 800-63B for headless agent authentication:

Hardware-Bound Identity

On first run, the server:

1. Reads your machine's hardware UUID (macOS IOPlatformUUID, Linux machine-id, Windows SMBIOS UUID)
2. Generates an ECDSA P-256 keypair — private key encrypted with a machine-derived AES-256-GCM key
3. Registers the device with the Corben API (public key + machine fingerprint)

The private key never leaves the device and cannot be decrypted on another machine.

Challenge-Response Authentication

After initial registration, no secrets are sent over the wire:

1. Client sends key fingerprint → Server looks up device
2. Server sends random challenge (32 bytes)
3. Client signs challenge with ECDSA private key
4. Server verifies signature with registered public key
5. Server issues IP-bound session token (15 min TTL)

Even if someone intercepts all network traffic, they cannot authenticate without the hardware-bound private key.

IP-Locked Tokens

Session tokens are bound to the client's IP address. If a token is used from a different IP:

• Token is immediately invalidated
• Event is logged to the device audit trail
• Client automatically re-authenticates

Defense in Depth

Platform Support

Manual Setup (if you skip the setup script)

1. Get an API Key

1. Go to panel.corben.world and create an account
2. Go to Settings → API Keys
3. Click Create API Key
4. Copy the key (starts with cb_)

2. Install

git clone https://github.com/gatordevin/corben-mcp.git ~/.corben-mcp
cd ~/.corben-mcp
npm install

3. Save Your Key

node index.js --login
# Paste your API key when prompted

4. Connect to Your AI Client

Claude Desktop — Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "corben": {
      "command": "node",
      "args": ["~/.corben-mcp/index.js"]
    }
  }
}

Claude Code:

claude mcp add corben -- node ~/.corben-mcp/index.js

Cursor — Settings → MCP Servers → Add:

{
  "corben": {
    "command": "node",
    "args": ["~/.corben-mcp/index.js"]
  }
}

Environment variable (alternative, less secure):

export CORBEN_API_KEY=cb_your_key_here
node ~/.corben-mcp/index.js

Managing Your Installation

# Update to latest version
cd ~/.corben-mcp && git pull && npm install

# Change API key
node ~/.corben-mcp/index.js --login

# Uninstall
rm -rf ~/.corben-mcp ~/.corben-mcp-credentials

# Check it works
echo '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"test","version":"1.0.0"}}}' | node ~/.corben-mcp/index.js 2>/dev/null

Troubleshooting

License

MIT