MCPProxy MCP Server

by smart-mcp-proxy Your server? Claim it

local only

MCPProxy runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 18 Sep 2026.

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

—

Installs / week

not published

375

Stars

7 open issues

18 Sep 2026

Last commit

from GitHub

MIT

License

What the code does

We read the source, 21 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Checks whether it runs in a sandbox internal/telemetry/env_kind.go:178, internal/updatecheck/channel.go:170

        if fs.Exists("/.dockerenv") || fs.Exists("/run/.containerenv") {

Builds a file path from a variable cmd/mcpproxy/logdir.go:20, cmd/release-gate/upgrade.go:102, internal/index/manager.go:42 и ещё 6

    return filepath.Join(home, config.DefaultDataDir)

Builds a database query by concatenation internal/jsruntime/pool.go:139, internal/storage/activity.go:488, frontend/src/views/ServerDetail.vue:1094 и ещё 1

        select {
        case vm := <-oldAvailable:
            instanceCount++
            // Only keep instances up to newSize
            if instanceCount <= newSize {

Runs an external command native/macos/MCPProxy/MCPProxy/Core/BundledCore.swift:31, native/macos/MCPProxy/MCPProxy/Core/CoreProcessManager.swift:1331, native/macos/MCPProxy/MCPProxyTests/CoreLivenessTests.swift:77 и ещё 4

        let process = Process()

Touches key and credential files internal/security/detect/checks/capability_mismatch.go:55, internal/security/detect/checks/phrase_injection.go:109, internal/security/paths.go:198 и ещё 1

    ".ssh", "id_rsa", "id_ed25519", "/etc/passwd", "/etc/shadow", ".aws/credential",

Touches key and credential files internal/security/detect/checks/embedded_secret.go:110, internal/security/detect/checks/phrase_injection.go:109, internal/server/mcp.go:4746

    regexp.MustCompile(`(?i)(?:\.git-credentials|\.gitconfig|\.npmrc|\.pypirc|\.netrc)\b`),

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Alternatives to MCPProxy

same job, measured the same way

MCP Safety Warden

by gautamvarmadatla

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

1 001 installs/wk local only

MCP Seatbelt

by kryptosai

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

112 installs/wk local only

MCPSentinel

by gentaarnezzi

Precision-first security scanning for Model Context Protocol servers.

507 installs/wk local only

Singularity - MCP Discovery & Security Gateway

by gaurav-kumar-sinha-060705

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

5 tools answering

MCP Safeguard

by cognivators

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

125 installs/wk local only

Mcpcheck

by joeyough

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

2 tools answering

Mcpsentry

by roshan6335

Security scanner and runtime proxy for MCP servers.

59 installs/wk local only

Vet

by getvet

Discover and vet MCP servers: search 200K+ AI tools with security verification and schemas.

56 installs/wk local only

MCPProxy — questions

Answers built from our own checks of this server.

Why is there no uptime for MCPProxy?

MCPProxy runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is MCPProxy open source?

Yes — it is published under the MIT licence, written in Go, 375 stars on GitHub and 7 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.