MCPProxy MCP Server

by smart-mcp-proxy Your server? Claim it

local only

MCPProxy runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 1 Nov 2026.

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

—

Installs / week

not published

405

Stars

18 open issues

1 Nov 2026

Last commit

from GitHub

MIT

License

What the code does

We read the source, 58 min ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Checks whether it runs in a sandbox internal/telemetry/env_kind.go:178, internal/updatecheck/channel.go:170

        if fs.Exists("/.dockerenv") || fs.Exists("/run/.containerenv") {

Builds a file path from a variable cmd/mcpproxy/logdir.go:20, cmd/release-gate/upgrade.go:102, internal/index/manager.go:42 и ещё 15

    return filepath.Join(home, config.DefaultDataDir)

Builds a database query by concatenation internal/jsruntime/pool.go:139, frontend/src/views/ServerDetail.vue:1046, internal/cache/manager.go:693 и ещё 2

        select {
        case vm := <-oldAvailable:
            instanceCount++
            // Only keep instances up to newSize
            if instanceCount <= newSize {

Runs an external command native/macos/MCPProxy/MCPProxy/Core/BundledCore.swift:31, native/macos/MCPProxy/MCPProxyTests/CoreSupersedeTests.swift:231, native/macos/MCPProxy/MCPProxyTests/ManagedCoreStopTests.swift:52 и ещё 4

        let process = Process()

Touches key and credential files internal/security/detect/checks/embedded_secret.go:110, internal/security/detect/checks/phrase_injection.go:153, internal/server/mcp.go:5899 и ещё 1

    regexp.MustCompile(`(?i)(?:\.git-credentials|\.gitconfig|\.npmrc|\.pypirc|\.netrc)\b`),

Touches key and credential files internal/security/paths.go:198, cmd/tpa-redteam/main.go:86, internal/security/detect/checks/capability_mismatch.go:58 и ещё 4

                "~/.ssh/id_rsa",

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Alternatives to MCPProxy

same job, measured the same way

MCP Safety Warden

by gautamvarmadatla

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

3 378 installs/wk local only

MCP Seatbelt

by kryptosai

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

78 installs/wk local only

MCPSentinel

by gentaarnezzi

Precision-first security scanning for Model Context Protocol servers.

169 installs/wk local only

Singularity - MCP Discovery & Security Gateway

by gaurav-kumar-sinha-060705

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

5 tools answering

MCP security checks — WARDEN and HISTOR

by modelmarket

Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

4 tools answering

MCP Safeguard

by cognivators

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

195 installs/wk local only

Mcpcheck

by joeyough

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

2 tools answering

Mcpsentry

by roshan6335

Security scanner and runtime proxy for MCP servers.

59 installs/wk local only

MCPProxy — questions

Answers built from our own checks of this server.

Why is there no uptime for MCPProxy?

MCPProxy runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is MCPProxy open source?

Yes — it is published under the MIT licence, written in Go, 405 stars on GitHub and 18 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.