corsproxy.dev is answering right now. Last checked 10 min ago.
Call third-party APIs from agents without leaking secrets. SSRF blocked, per-key quotas.
Nothing serious here today
Today is the operative word: we check corsproxy.dev every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.
claude mcp add mcp --transport http https://api.corsproxy.dev/mcphttps://api.corsproxy.dev/mcp[mcp_servers.mcp]
url = "https://api.corsproxy.dev/mcp"{
"mcpServers": {
"mcp": {
"url": "https://api.corsproxy.dev/mcp"
}
}
}{
"servers": {
"mcp": {
"type": "http",
"url": "https://api.corsproxy.dev/mcp"
}
}
}This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://api.corsproxy.dev/mcp | streamable-http | needs auth | 78 ms | 10 min ago |
Alternatives to corsproxy.dev
same job, measured the same wayLocal MCP broker: agents call credentials through a daemon without seeing secrets.
Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure.
Save and use 1Password secrets locally without exposing plaintext to AI agents.
Encrypted store for API keys and database URLs your code needs. Use them without reading them.
29 pay-per-call DNS, SEO, SSL, security, WHOIS, mail, and AI tools for AI agents. x402, no API key.
Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.
Secrets for developers and agents—secure context and workflows without exposing secret values.
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
corsproxy.dev — questions
Answers built from our own checks of this server.