MCPProxy is a local-first MCP proxy written in Go whose purpose is to provide one safe endpoint in front of all upstream MCP servers. Its standout capabilities are BM25 tool discovery (retrieve_tools) for large context savings, quarantine of new servers to block Tool Poisoning Attacks, pluggable Docker-based security scanners, and a local, auditable Activity Log. The core is a single binary with an embedded web UI, cross-platform for macOS, Linux and Windows, with an optional macOS menu-bar app. Note that it is a third-party proxy, not an official protocol implementation; it runs locally, inspects tool arguments and results, and executes commands from your config, so config trust and local permission boundaries are the key risks. Best suited to teams with many tools that care about security and token cost.
MCPProxy is a local-first MCP proxy written in Go that puts one safe endpoint in front of every upstream MCP server. Instead of loading hundreds of tool schemas, agents call a single retrieve_tools function that runs BM25 keyword search across all connected servers — the README cites research showing ~99% token reduction with a 43% accuracy improvement. It federates many MCP servers (the README says it bypasses Cursor's 40-tool limit and OpenAI's 128-function cap), automatically quarantines new servers to block Tool Poisoning Attacks until manually approved, and can run pluggable Docker-based scanners (Snyk, Semgrep, Trivy, Cisco and others) whose findings are normalized to SARIF with a composite risk score. Every call is recorded in a local Activity Log with a request ID for auditing. The core is a single binary with an embedded web UI for macOS, Linux and Windows; macOS also offers an optional menu-bar app.
1) Install: on macOS download the DMG or use Homebrew (brew install --cask smart-mcp-proxy/mcpproxy/mcpproxy for the menu-bar app, brew install smart-mcp-proxy/mcpproxy/mcpproxy for the CLI only); on Windows download the installer; on Linux use the apt or dnf repository, the AUR package mcpproxy-bin, or a tarball. With Go 1.26+ you can run go install github.com/smart-mcp-proxy/mcpproxy-go/cmd/mcpproxy@latest. 2) Run mcpproxy serve, which starts an HTTP server on :8080. 3) Edit ~/.mcpproxy/mcp_config.json and add upstream servers under mcpServers (local stdio or remote http). 4) Connect your IDE/client as an MCP server: in Cursor add an MCP server with type http and url http://localhost:8080/mcp/; for Claude Desktop use npx -y mcp-remote http://localhost:8080/mcp. Optional: enable HTTPS (MCPPROXY_TLS_ENABLED=true or tls.enabled in config) and trust the certificate with mcpproxy trust-cert.
{
"mcpServers": {
"MCPProxy": {
"type": "http",
"url": "http://localhost:8080/mcp/"
}
}
}