@0disoft/mcp-security-proxy-cli

@0disoft/mcp-security-proxy-cli

Deny-by-default local stdio proxy and policy inspection commands for MCP servers.

npm install --global @0disoft/mcp-security-proxy-cli
mcp-security-proxy --help

Generate a host-neutral stdio descriptor without modifying host configuration files:

mcp-security-proxy config-snippet --target stdio-json --policy ./policy.json --profile local -- node server.js

Generate Codex registration argv without editing Codex configuration:

mcp-security-proxy config-snippet --target codex-cli-json --name secured-filesystem --policy ./policy.json --profile local -- node server.js

Generate project-scoped Gemini registration argv without editing Gemini configuration:

mcp-security-proxy config-snippet --target gemini-cli-json --name secured-filesystem --policy ./policy.json --profile local -- node server.js

The CLI controls MCP discovery and tool calls at the protocol boundary. It is not an operating-system sandbox and does not bundle a host approval UI.

See the CLI command contract.