I built something for this exact use-case using Cloudflare Tunnels:

https://github.com/dalberto/mcp-ferry

I also use CF managed auth to make auth easier.