1. Conduid
  2. Security
  3. Proxy
MCP server · Security

Proxy

by · github.com/achetronic/mcp-proxy

proxy for Model Context Protocol (MCP) servers that adds authentication, authorization, and enterprise features to any MCP backend.

Unclaimed Apache-2.0 last commit a year ago mcpstdiooauth2mcp-serverproxystreamable-httpsecurity
InstallView source
54Fair

Scored 2 days ago · breakdown

About Proxy

Proxy is an MCP server published by achetronic in the Security category: proxy for Model Context Protocol (MCP) servers that adds authentication, authorization, and enterprise features to any MCP backend. It has been installed 0 times through Conduid.

The repository has 9 stars and 3 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx mcp-proxy

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Proxy

Powered by Claude · Grounded in docs

I know everything about Proxy. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.1.0v0.1.0 · 16 Aug 2025Initial Release 🚀 Hope you like it ❤️ and contribute 🤝

README

MCP Proxy

GitHub go.mod Go version (subdirectory of monorepo) GitHub

YouTube Channel Subscribers GitHub followers X (formerly Twitter) Follow

A proxy for Model Context Protocol (MCP) servers that adds authentication, authorization, and enterprise features to any MCP backend. Transform your local MCP servers into secure, scalable services ready for remote access.

Motivation

MCP servers are often developed for local use with stdio transport, making them unsuitable for production environments where remote access, authentication, and scalability are required. MCP Proxy bridges this gap by providing a layer in front of any MCP server, enabling enterprise deployment while preserving the original MCP functionality.

Features

  • 🔐 OAuth RFC 8414 and RFC 9728 compliant

  • Support for .well-known/oauth-protected-resource and .well-known/oauth-authorization-server endpoints

  • Both endpoints are configurable

  • 🛡️ Several JWT validation methods

  • Delegated to external systems like Istio

  • Locally validated based on JWKS URI and CEL expressions for claims

  • 🔄 Transport bridging

  • Accept StreamableHTTP and Stdio requests and forward to HTTP or stdio MCP backends

  • Enable remote access to local MCP servers

  • 📋 Access logs can exclude or redact fields

  • 🚀 Production-ready: Included full examples, Dockerfile, Helm Chart and GitHub Actions for CI

  • ⚡ Super easy to extend: Production vitamins added to a good juice: mcp-go

Deployment

Production 🚀

Deploy to Kubernetes using the Helm chart located in the chart/ directory.

How to develop your MCP

Prerequisites

  • Go 1.24+

Modify the code and run

Modify the entire codebase and execute make run

Note: Default YAML config executing the previous command start the server as an HTTP server forwarding to a Stdio server. Other needs? just modify the Makefile to use other YAML provided in examples.

Configuration Examples

Several configuration examples are available here

🤝 Contributing

All contributions are welcome! Whether you're reporting bugs, suggesting features, or submitting code — thank you! Here’s how to get involved:

▸ Open an issue to report bugs or request features

▸ Submit a pull request to contribute improvements

📄 License

MCP Proxy is licensed under the Apache 2.0 License.

README mirrored from the source repository 2 days ago. The original is authoritative.

Questions

About Proxy

How do I install Proxy?

Run npx mcp-proxy, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Proxy safe to use with an AI agent?

Its trust score is 54 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Proxy still maintained?

The last commit was a year ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.