Routing Modes
Configure how MCPProxy exposes upstream tools to AI agents
Schema-Deferred Direct
Enumerate every upstream tool on the direct surface without shipping its inputSchema — compact signatures now, full schemas on demand
Search & Discovery
Intelligent tool discovery using BM25 search across all MCP servers
Tools Preflight
Deterministic, side-effect-free availability check for required tools before an automation spends model tokens
Needs Attention
The one needs-attention list every MCPProxy surface reads from — sign-in prompts, reviews, errors, missing secrets, configuration problems, unseen clients and client-credential warnings.
Profiles
Named views over your upstream servers with a tool policy: tier caps, rules, client and token bindings, anonymous confinement and an access explainer.
Credential lifecycle (MCP)
Issue, inspect and revoke worker credentials (locked client credentials and profile-pinned agent tokens) from an administrator agent over MCP with the credentials tool.
Connect Clients
Preview-before-write connect flow that registers mcpproxy in an MCP client's config file, with a sanitized disclosure of what is replaced and a precondition token that makes a stale preview unwritable
Agent Instructions
Help Claude Code, Codex and other agents find the tools behind mcpproxy instead of falling back to shell CLIs — what the proxy tells each client automatically, and a snippet for CLAUDE.md / AGENTS.md
Config Import
Import MCP server configurations from Claude Desktop, Claude Code, Cursor IDE, Codex CLI, and Gemini CLI
Registry Add
Add an upstream server by registry and server id; the daemon derives the runnable config and quarantines it for review.
Activity Log
Track and audit AI agent tool calls with the Activity Log
Intent Declaration
Fine-grained permission control for AI tool calls with intent-based tool splitting
TOON Output
Adaptive TOON encoding of tool-call results — token savings on tabular payloads, byte-identical passthrough everywhere else
Version Updates
How MCPProxy checks for and displays version updates
Auto-Update
One-click updates in the macOS tray, the channel-aware mcpproxy update CLI, and every switch that turns them off
Telemetry
What the anonymous daily heartbeat contains, what it never contains, and how to disable it.
Security
11 items
Isolation
2 items
Authentication
3 items