[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_128":129},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_56":48,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":-5,"_77":-5,"_78":48,"_79":-5,"_80":81,"_82":83,"_84":85,"_86":87,"_88":89,"_90":91,"_92":93},"apiUrl","https://odel.app/api","creator","smart-mcp-proxy","moduleId","mcpproxy-go","@smart-mcp-proxy/mcpproxy-go","displayName","MCPProxy","tagline","Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings","iconKey","https://avatars.githubusercontent.com/u/216428285?v=4","category","local","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","pricingModel","free","creatorUserId","system:external-import","createdAt",1783345096000,"updatedAt",1788670102000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.smart-mcp-proxy%2Fmcpproxy-go","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",336,"upstreamUpdatedAt",1788588421000,"detectedTransport","detectedAuthType","probeStatus","lastProbedAt","githubRepoUrl","https://github.com/smart-mcp-proxy/mcpproxy-go","githubRepoFullName","smart-mcp-proxy/mcpproxy-go","releaseId","ext-smart-mcp-proxy-mcpproxy-go","version","0.65.0","descriptionMarkdown","

\n \n $\"MCPProxy$ \n \n

\n\n

\n\n[![Release](https://img.shields.io/github/v/release/smart-mcp-proxy/mcpproxy-go?sort=semver)](https://github.com/smart-mcp-proxy/mcpproxy-go/releases)\n[![Build](https://github.com/smart-mcp-proxy/mcpproxy-go/actions/workflows/unit-tests.yml/badge.svg)](https://github.com/smart-mcp-proxy/mcpproxy-go/actions/workflows/unit-tests.yml)\n[![Go Report Card](https://goreportcard.com/badge/github.com/smart-mcp-proxy/mcpproxy-go)](https://goreportcard.com/report/github.com/smart-mcp-proxy/mcpproxy-go)\n[![Go Reference](https://pkg.go.dev/badge/github.com/smart-mcp-proxy/mcpproxy-go.svg)](https://pkg.go.dev/github.com/smart-mcp-proxy/mcpproxy-go)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)\n[![GitHub stars](https://img.shields.io/github/stars/smart-mcp-proxy/mcpproxy-go?style=social)](https://github.com/smart-mcp-proxy/mcpproxy-go/stargazers)\n[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/smart-mcp-proxy/mcpproxy-go/badge)](https://securityscorecards.dev/viewer/?uri=github.com/smart-mcp-proxy/mcpproxy-go)\n\n

\n\n

\n $\"MCPProxy$ \n

\n\n

\n 📺 Watch the full walkthrough · \n 📚 Read the docs · \n 🌐 mcpproxy.app\n

\n\n> The demo above shows the **embedded web UI**. The MCPProxy **core is a single binary for macOS, Linux, and Windows** — the web UI ships inside it, with no extra service to run. On **macOS**, an optional **menu‑bar app** adds one‑click convenience (start/stop, server health, quarantine, logs).\n\n

\n $\"MCPProxy$ \n \n $\"MCPProxy$ \n
\n macOS menu‑bar app · Activity log & audit in the macOS app\n

\n\n\n## Why MCPProxy?\n\n- **Scale beyond API limits** – Federate hundreds of MCP servers while bypassing Cursor's 40-tool limit and OpenAI's 128-function cap.\n- **Save tokens & accelerate responses** – Agents load just one `retrieve_tools` function instead of hundreds of schemas. Research shows ~99 % token reduction with **43 % accuracy improvement**.\n- **Advanced security protection** – Automatic quarantine blocks Tool Poisoning Attacks until you manually approve new servers.\n- **Pluggable security scanners** – Run Snyk, Semgrep, Trivy, Cisco, and other Docker-based scanners against quarantined servers before you approve them; findings are normalized to SARIF with a composite risk score. See [Security scanner plugins](https://docs.mcpproxy.app/features/security-scanner-plugins/).\n- **Works offline & cross-platform** – A single core binary for macOS (Intel & Apple Silicon), Windows (x64 & ARM64), and Linux (x64 & ARM64), with the **web UI embedded**. macOS additionally ships an optional menu-bar app.\n\n---\n\n## Quick Start\n\n### 1. Install\n\n**macOS (Recommended - DMG Installer):**\n\nDownload the latest DMG installer for your architecture:\n- **Apple Silicon (M1/M2):** [Download DMG](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest) → `mcpproxy-*-darwin-arm64.dmg`\n- **Intel Mac:** [Download DMG](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest) → `mcpproxy-*-darwin-amd64.dmg`\n\n**Windows (Recommended - Installer):**\n\nDownload the latest Windows installer for your architecture:\n- **x64 (64-bit):** [Download Installer](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest) → `mcpproxy-setup-*-amd64.exe`\n- **ARM64:** [Download Installer](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest) → `mcpproxy-setup-*-arm64.exe`\n\nThe installer automatically:\n- Installs both `mcpproxy.exe` (core server) and `mcpproxy-tray.exe` (system tray app) to Program Files\n- Adds MCPProxy to your system PATH for command-line access\n- Creates Start Menu shortcuts\n- Supports silent installation: `.\\mcpproxy-setup.exe /VERYSILENT`\n\n**Alternative install methods:**\n\nmacOS (Homebrew):\n```bash\n# macOS — GUI tray app (recommended):\nbrew install --cask smart-mcp-proxy/mcpproxy/mcpproxy\n\n# macOS / Linux — headless CLI only:\nbrew install smart-mcp-proxy/mcpproxy/mcpproxy\n```\n\nThe cask installs the menu-bar app (bundles the CLI); the formula is the CLI binary only. Both update via `brew upgrade`.\n\nLinux (Debian/Ubuntu) — apt repository, auto-updates via `apt upgrade`:\n```bash\nsudo install -m 0755 -d /etc/apt/keyrings\ncurl -fsSL https://apt.mcpproxy.app/mcpproxy.gpg \\\n | sudo tee /etc/apt/keyrings/mcpproxy.gpg > /dev/null\necho \"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/mcpproxy.gpg] https://apt.mcpproxy.app stable main\" \\\n | sudo tee /etc/apt/sources.list.d/mcpproxy.list > /dev/null\nsudo apt update && sudo apt install mcpproxy\n```\n\nLinux (Fedora / RHEL / Rocky / AlmaLinux) — dnf repository, auto-updates via `dnf upgrade`:\n```bash\nsudo dnf config-manager --add-repo https://rpm.mcpproxy.app/mcpproxy.repo\n# Fedora 41+ (dnf5): sudo curl -fsSL https://rpm.mcpproxy.app/mcpproxy.repo -o /etc/yum.repos.d/mcpproxy.repo\nsudo dnf install -y mcpproxy\n```\n\nArch Linux (AUR): [`mcpproxy-bin`](https://aur.archlinux.org/packages/mcpproxy-bin)\n```bash\nyay -S mcpproxy-bin\n# or\ngit clone https://aur.archlinux.org/mcpproxy-bin.git && cd mcpproxy-bin && makepkg -si\n```\n\nThe apt and dnf packages ship a hardened `systemd` unit and start the service automatically. Repository signing key fingerprint: `3B6F A1AD 5D53 59DA 51F1 8DDC E1B5 9B9B A1CB 8A3B`.\n\nFor one-off `.deb` / `.rpm` downloads (air-gapped installs), grab them from the [latest release](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest).\n\nManual download (all platforms):\n- **Linux tarball**: [AMD64](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest/download/mcpproxy-latest-linux-amd64.tar.gz) | [ARM64](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest/download/mcpproxy-latest-linux-arm64.tar.gz)\n- **Windows**: [AMD64](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest/download/mcpproxy-latest-windows-amd64.zip) | [ARM64](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest/download/mcpproxy-latest-windows-arm64.zip)\n\n**Prerelease Builds (Latest Features):**\n\nWant to try the newest features? Download prerelease builds from the `next` branch:\n\n1. Go to [GitHub Actions](https://github.com/smart-mcp-proxy/mcpproxy-go/actions)\n2. Click the latest successful \"Prerelease\" workflow run\n3. Download from **Artifacts**:\n - `dmg-darwin-arm64` (Apple Silicon Macs)\n - `dmg-darwin-amd64` (Intel Macs)\n - `versioned-linux-amd64`, `versioned-windows-amd64` (other platforms)\n\n> **Note**: Prerelease builds are signed and notarized for macOS but contain cutting-edge features that may be unstable.\n\n- **macOS**: [Intel](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest/download/mcpproxy-latest-darwin-amd64.tar.gz) | [Apple Silicon](https://github.com/smart-mcp-proxy/mcpproxy-go/releases/latest/download/mcpproxy-latest-darwin-arm64.tar.gz)\n\nAnywhere with Go 1.25+:\n```bash\ngo install github.com/smart-mcp-proxy/mcpproxy-go/cmd/mcpproxy@latest\n```\n\n### 2. Run\n\n```bash\nmcpproxy serve # starts HTTP server on :8080 and shows tray\n```\n\n### 3. Add your first server\n\nCreate or edit `~/.mcpproxy/mcp_config.json`:\n\n```jsonc\n{\n \"listen\": \"127.0.0.1:8080\",\n \"mcpServers\": [\n { \"name\": \"local-python\", \"command\": \"python\", \"args\": [\"-m\", \"my_server\"], \"protocol\": \"stdio\", \"enabled\": true },\n { \"name\": \"remote-http\", \"url\": \"http://localhost:3001\", \"protocol\": \"http\", \"enabled\": true }\n ]\n}\n```\n\nSee [Configuration](https://docs.mcpproxy.app/configuration/config-file/) and [Upstream Servers](https://docs.mcpproxy.app/configuration/upstream-servers/) for the full reference.\n\n### 4. Connect to your IDE/AI tool\n\n📖 **[Complete Setup Guide](https://github.com/smart-mcp-proxy/mcpproxy-go/blob/main/docs/setup.md)** - Detailed instructions for Cursor, VS Code, Claude Desktop, and Goose\n\n## Add proxy to Cursor\n\n### One-click install into Cursor IDE\n\n[![Install in Cursor IDE](https://img.shields.io/badge/Install_in_Cursor-3e44fe?logo=data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94P…&style=for-the-badge)](https://mcpproxy.app/cursor-install.html)\n\n### Manual install\n\n\n1. Open Cursor Settings\n2. Click \"Tools & Integrations\"\n3. Add MCP server\n```json\n \"MCPProxy\": {\n \"type\": \"http\",\n \"url\": \"http://localhost:8080/mcp/\"\n }\n```\n\n---\n\n## How AI Agents Work Through MCPProxy\n\nOnce connected, your agent sees a handful of built-in MCPProxy tools instead of hundreds of upstream schemas. A typical session has three beats — discover, call, audit — plus an optional preflight gate for unattended automations.\n\n### 1. Discover — spend one query, not your context window\n\nThe agent asks for what it needs in plain keywords via `retrieve_tools`:\n\n```json\n{ \"query\": \"create github issue\", \"limit\": 5 }\n```\n\nMCPProxy runs a BM25 search across every connected server and returns only the top-ranked matches — each with a `call_with` hint recommending the right call variant for its annotations:\n\n```json\n{\n \"tools\": [\n { \"name\": \"github:create_issue\", \"score\": 0.89, \"call_with\": \"call_tool_write\" },\n { \"name\": \"gitlab:create_issue\", \"score\": 0.72, \"call_with\": \"call_tool_write\" }\n ]\n}\n```\n\nThis is where the token savings come from: the schemas of the hundreds of tools the agent *didn't* need never enter its context. The agent loads full schemas on demand with `describe_tool` (batch up to 5 ids) only for the tools it's about to use.\n\n### 2. Call — with declared intent\n\nThe agent executes the tool through the variant matching its intent (`call_tool_read`, `call_tool_write`, or `call_tool_destructive`), addressing it as `server:tool`:\n\n```json\n{\n \"name\": \"github:create_issue\",\n \"args_json\": \"{\\\"repo\\\": \\\"acme/api\\\", \\\"title\\\": \\\"Bug report\\\"}\",\n \"intent\": { \"operation_type\": \"write\", \"reason\": \"Filing bug per user request\" }\n}\n```\n\nMCPProxy validates the intent against the tool's annotations (a \"read\" call can't reach a destructive tool), checks quarantine and approval state, and scans arguments and responses for sensitive data before anything leaves the machine.\n\n### 3. Audit — every call is on the record\n\nEvery call lands in the local [Activity Log](https://docs.mcpproxy.app/features/activity-log/) with a request ID, so you can reconstruct exactly what an agent did:\n\n```bash\nmcpproxy activity list # everything, newest first\nmcpproxy activity list --request-id # one workflow, correlated\n```\n\n### Gate automations before they burn tokens\n\nFor recurring headless jobs (cron, CI, n8n), don't let the agent discover a missing tool the expensive way. One preflight command checks that every required tool is ready — without contacting any upstream server — and reports exactly why when it isn't (server quarantined, tool changed since approval, OAuth expired, typo'd id):\n\n```bash\nmcpproxy tools preflight gh-ops:sync_issues slack:post_message --wait 10s\ncase $? in\n 0) run-agent-session ;; # all ready — go\n 10) exit 75 ;; # transient (server starting) — let the next cron tick retry\n 11) page-operator ;; # blocked — someone must approve / enable / log in\n 12) fail-pipeline ;; # unknown tool id — the automation itself is misconfigured\nesac\n```\n\nSee [Required-Tools Preflight](https://docs.mcpproxy.app/features/tools-preflight/) for the full reason taxonomy, REST endpoint, and GitHub Actions / n8n recipes.\n\n---\n\n## 🔐 Optional HTTPS Setup\n\nMCPProxy works with HTTP by default for easy setup. HTTPS is optional and primarily useful for production environments or when stricter security is required.\n\n**💡 Note**: Most users can stick with HTTP (the default) as it works perfectly with all supported clients including Claude Desktop, Cursor, and VS Code.\n\n### Quick HTTPS Setup\n\n**1. Enable HTTPS** (choose one method):\n```bash\n# Method 1: Environment variable\nexport MCPPROXY_TLS_ENABLED=true\nmcpproxy serve\n\n# Method 2: Config file\n# Edit ~/.mcpproxy/mcp_config.json and set \"tls.enabled\": true\n```\n\n**2. Trust the certificate** (one-time setup):\n```bash\nmcpproxy trust-cert\n```\n\n**3. Use HTTPS URLs**:\n- MCP endpoint: `https://localhost:8080/mcp`\n- Web UI: `https://localhost:8080/ui/`\n\n### Claude Desktop Integration\n\nFor Claude Desktop, add this to your `claude_desktop_config.json`:\n\n**HTTP (Default - Recommended):**\n```json\n{\n \"mcpServers\": {\n \"mcpproxy\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"mcp-remote\",\n \"http://localhost:8080/mcp\"\n ]\n }\n }\n}\n```\n\n**HTTPS (With Certificate Trust):**\n```json\n{\n \"mcpServers\": {\n \"mcpproxy\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"mcp-remote\",\n \"https://localhost:8080/mcp\"\n ],\n \"env\": {\n \"NODE_EXTRA_CA_CERTS\": \"~/.mcpproxy/certs/ca.pem\"\n }\n }\n }\n}\n```\n\n### Certificate Management\n\n- **Automatic generation**: Certificates created on first HTTPS startup\n- **Multi-domain support**: Works with `localhost`, `127.0.0.1`, `::1`\n- **Trust installation**: Use `mcpproxy trust-cert` to add to system keychain\n- **Certificate location**: `~/.mcpproxy/certs/` (ca.pem, server.pem, server-key.pem)\n\n### Troubleshooting HTTPS\n\n**Certificate trust issues**:\n```bash\n# Re-trust certificate\nmcpproxy trust-cert --force\n\n# Check certificate location\nls ~/.mcpproxy/certs/\n\n# Test HTTPS connection\ncurl -k https://localhost:8080/api/v1/status\n```\n\n**Claude Desktop connection issues**:\n- Ensure `NODE_EXTRA_CA_CERTS` points to the correct ca.pem file\n- Restart Claude Desktop after config changes\n- Verify HTTPS is enabled: `mcpproxy serve --log-level=debug`\n\n---\n\n## Documentation\n\n### Getting Started\n- [Installation](https://docs.mcpproxy.app/getting-started/installation/)\n- [Quick Start](https://docs.mcpproxy.app/getting-started/quick-start/)\n\n### Configuration\n- [Config File Reference](https://docs.mcpproxy.app/configuration/config-file/)\n- [Upstream Servers](https://docs.mcpproxy.app/configuration/upstream-servers/)\n- [Environment Variables](https://docs.mcpproxy.app/configuration/environment-variables/)\n\n### Features\n- [Search & Tool Discovery](https://docs.mcpproxy.app/features/search-discovery/)\n- [Security Quarantine](https://docs.mcpproxy.app/features/security-quarantine/)\n- [Security Scanner Plugins](https://docs.mcpproxy.app/features/security-scanner-plugins/)\n- [Docker Security Isolation](https://docs.mcpproxy.app/features/docker-isolation/)\n- [Secrets & Keyring Integration](https://docs.mcpproxy.app/features/keyring-integration/)\n- [OAuth Authentication](https://docs.mcpproxy.app/features/oauth-authentication/)\n- [Code Execution](https://docs.mcpproxy.app/features/code-execution/)\n- [Activity Log](https://docs.mcpproxy.app/features/activity-log/)\n- [Required-Tools Preflight](https://docs.mcpproxy.app/features/tools-preflight/)\n- [Agent Tokens](https://docs.mcpproxy.app/features/agent-tokens/)\n- [Sensitive Data Detection](https://docs.mcpproxy.app/features/sensitive-data-detection/)\n\n### CLI Reference\n- [Command Reference](https://docs.mcpproxy.app/cli/command-reference/)\n- [Management Commands](https://docs.mcpproxy.app/cli/management-commands/)\n- [Activity Commands](https://docs.mcpproxy.app/cli/activity-commands/)\n- [Security Commands](https://docs.mcpproxy.app/cli/security-commands/)\n\n### API\n- [REST API](https://docs.mcpproxy.app/api/rest-api/)\n- [MCP Protocol](https://docs.mcpproxy.app/api/mcp-protocol/)\n\n---\n\n## Contributing\n\nWe welcome issues, feature ideas, and PRs!\n\n### Development Setup\n\n```bash\nmake dev-setup # Install swag, frontend deps, Playwright\nbrew install prek # Install pre-commit hook runner (or: uv tool install prek)\nprek install # Install pre-commit hooks\nprek install --hook-type pre-push # Install pre-push hooks\n```\n\n### Pre-commit Hooks\n\nWe use [prek](https://github.com/j178/prek) to catch issues before they reach CI:\n\n| Hook | Stage | What it does |\n|------|-------|-------------|\n| `gofmt` | pre-commit | Auto-formats staged Go files |\n| `trailing-whitespace` | pre-commit | Removes trailing whitespace |\n| `end-of-file-fixer` | pre-commit | Ensures files end with newline |\n| `check-merge-conflict` | pre-commit | Detects merge conflict markers |\n| `swagger-verify` | pre-push | Fails if OpenAPI spec is out of date |\n| `go-build` | pre-push | Verifies the project compiles |\n\nRun hooks manually: `prek run --all-files`\n\n### Build & Test\n\n```bash\nmake build # Build frontend + backend\nmake swagger # Regenerate OpenAPI spec\nmake test # Unit tests\nmake test-e2e # E2E tests\nmake lint # Run linters\n```\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"iconType","image","upstream",{"_111":112,"_113":114,"_115":116,"_117":118,"_119":120,"_121":122},"requiredSecrets",[],"tags",[96,97,98,99,100,101,102,103,104,105,106,107,108,109,110],"assets",[],"stats",{"_94":81,"_95":81},"ratingAvg","reviewCount","ai","ai-agents","audit-logging","bm25","cli","context-window","developer-tools","docker","golang","llm","llm-tools","local-first","mcp-proxy","proxy-server","security","topics",[96,97,98,99,100,101,102,103,104,105,106,107,123,108,124,125,109,110,126,127],"license","MIT","language","Go","registryName","io.github.smart-mcp-proxy/mcpproxy-go","homepage","https://mcpproxy.app","packages",[],"mcp","mcp-server","model-context-protocol","tool-routing","web-ui","ENV",{"_130":131,"_132":133,"_134":135},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]