Mcp Proxy
proxy for Model Context Protocol (MCP) servers that adds authentication, authorization, and enterprise features to any MCP backend.
Install
$ agentstack add mcp-achetronic-mcp-proxy ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/mcp-achetronic-mcp-proxy) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
MCP Proxy
A proxy for Model Context Protocol (MCP) servers that adds authentication, authorization, and enterprise features to any MCP backend. Transform your local MCP servers into secure, scalable services ready for remote access.
Motivation
MCP servers are often developed for local use with stdio transport, making them unsuitable for production environments where remote access, authentication, and scalability are required. MCP Proxy bridges this gap by providing a layer in front of any MCP server, enabling enterprise deployment while preserving the original MCP functionality.
Features
- 🔐 OAuth RFC 8414 and RFC 9728 compliant
- Support for
.well-known/oauth-protected-resourceand.well-known/oauth-authorization-serverendpoints - Both endpoints are configurable
- 🛡️ Several JWT validation methods
- Delegated to external systems like Istio
- Locally validated based on JWKS URI and CEL expressions for claims
- 🔄 Transport bridging
- Accept StreamableHTTP and Stdio requests and forward to HTTP or stdio MCP backends
- Enable remote access to local MCP servers
- 📋 Access logs can exclude or redact fields
- 🚀 Production-ready: Included full examples, Dockerfile, Helm Chart and GitHub Actions for CI
- ⚡ Super easy to extend: Production vitamins added to a good juice: mcp-go
Deployment
Production 🚀
Deploy to Kubernetes using the Helm chart located in the chart/ directory.
How to develop your MCP
Prerequisites
- Go 1.24+
Modify the code and run
Modify the entire codebase and execute make run
Note: Default YAML config executing the previous command start the server as an HTTP server forwarding to a Stdio server. Other needs? just modify the Makefile to use other YAML provided in examples.
Configuration Examples
Several configuration examples are available [here](./docs)
🤝 Contributing
All contributions are welcome! Whether you're reporting bugs, suggesting features, or submitting code — thank you! Here’s how to get involved:
▸ Open an issue to report bugs or request features
▸ Submit a pull request to contribute improvements
📄 License
MCP Proxy is licensed under the [Apache 2.0 License](./LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: achetronic
- Source: achetronic/mcp-proxy
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.