smart-mcp-proxy/mcpproxy-go

Supercharge AI Agents, Safely

305 ★42 forksGoUpdated 1d ago

What you need to know

Single-binary MCP proxy (embedded web UI) that federates many MCP servers behind one safe HTTP endpoint, with tool discovery, security quarantine against tool-poisoning, and pluggable Docker-based security scanners.

Install

brew install --cask smart-mcp-proxy/mcpproxy/mcpproxy (macOS tray app)
sudo apt update && sudo apt install mcpproxy (Debian/Ubuntu apt repo)
sudo dnf install -y mcpproxy (Fedora/RHEL dnf repo)
go install github.com/smart-mcp-proxy/mcpproxy-go/cmd/mcpproxy@latest
Windows/macOS: DMG/EXE installers from GitHub releases

Usage

  • mcpproxy serve — starts HTTP server on :8080 and shows the tray app
  • Edit ~/.mcpproxy/mcp_config.json to register stdio or HTTP upstream MCP servers
  • Point clients at http://localhost:8080/mcp/ (Cursor: Tools & Integrations → Add MCP server; Claude Desktop via npx mcp-remote; also VS Code and Goose)
  • Optional HTTPS: export MCPPROXY_TLS_ENABLED=true, then mcpproxy trust-cert

Key features

  • Scale beyond API limits — federate hundreds of MCP servers while bypassing Cursor's 40-tool limit and OpenAI's 128-function cap
  • Token savings: agents load one retrieve_tools function instead of hundreds of schemas (~99% token reduction with 43% accuracy improvement claimed)
  • Automatic quarantine blocks Tool Poisoning Attacks until servers are manually approved
  • Pluggable security scanners (Snyk, Semgrep, Trivy, Cisco) run against quarantined servers; findings normalized to SARIF
  • Cross-platform core binary (macOS Intel/Apple Silicon, Windows x64/ARM64, Linux x64/ARM64) with embedded web UI; optional macOS menu-bar app

Best for

Developers and teams running many MCP servers who want one secure endpoint, tool discovery, and quarantine-based review before approving servers.

Caveats

  • HTTPS is optional; HTTP (default) works with Claude Desktop, Cursor, and VS Code
  • Prerelease builds are signed/notarized on macOS but may be unstable
  • Requires a config file (~/.mcpproxy/mcp_config.json) to register upstream servers
Platforms: macOS · Windows · LinuxClients: Cursor · VS Code · Claude Desktop · Goose
Documentation ↗

Reviewed 2026-08-07

Topics

aiai-agentsaudit-loggingbm25clicontext-windowdeveloper-toolsdockergolangllmllm-toolslocal-firstmcpmcp-proxymcp-servermodel-context-protocolproxy-serversecuritytool-routingweb-ui
View on GitHub ↗
Stars
305★
Forks
42
Language
Go
License
MIT
Created
2025-06-18
Last push
2026-08-05