NullWire-MCP runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 1 Nov 2026.
RAM-only HTTP debugging proxy and MCP server in Go. AI agents see salted tags, never secrets.
What the code does
We read the source, 5 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return filepath.Join(append([]string{h}, parts...)...), nil
func copyHeaders(src http.Header, extraDrop ...string) http.Header {
drop := make(map[string]bool, len(hopByHop)+len(extraDrop))
const child = spawn(bin, args, {
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to NullWire-MCP
same job, measured the same waySecure secrets proxy for AI agents — manages API keys so agents never see raw credentials.
One firewall and password manager for all your AI coding agents' MCP servers and secrets.
Read-only Kubernetes MCP server: inspect resources, logs, events, and metrics. Secrets are masked.
Real-time semantic security for AI coding agents and MCP tools
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat.
DMCPS: Highly secure, isolated MCP server environment giving AI agents sandboxed shell access.
OS keychain secrets for AI coding agents, over MCP.
NullWire-MCP — questions
Answers built from our own checks of this server.