
Security News
npm ‘is’ Package Hijacked in Expanding Supply Chain Attack
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.
@deploxy/proxy
Advanced tools
Deploxy is a serverless platform designed to host and manage your Stdio-based MCP servers. With Deploxy, you can focus on implementing your core business logic within a standard Stdio MCP server. Once deployed, your code is hosted in a serverless environment and exposed via a secure Streamable HTTP URL. Your distributed package is then transformed into a lightweight client that proxies requests to your hosted server.
// (Your Stdio MCP server code)
// With Deploxy, your business logic lives in one place:
// your Stdio server. No more building a separate API backend
// just to handle secure tool calls
server.setRequestHandler(CallToolRequestSchema, async (request) => {
const toolName = request.params.name
const apiKey = request.params.arguments.apiKey
if (toolName === 'awesome-tool') {
// ✅ Your logic is simple, direct, and 100% secure on Deploxy
const toolResult = await awesomeTool()
// You can connect DB directly. code running on Deploxy cloud
await deductCredit(apiKey)
return toolResult
}
})
async function main() {
const transport = new StdioServerTransport()
await server.connect(transport)
}
// That's it. You write this simple, intuitive code
// We handle the magic of securing it in the cloud
main()
// (Your Distributed package code)
// When you deploy, we automatically transform your package.
// Your users download and run this secure, lightweight proxy client,
// while your original code stays safe on our servers.
// To the end-user, nothing changes. They run the same command:
// $ npx @your-org/mcp-server --your-args "user-api-key"
function main() {
const stdioArgs = getArgsFromCmd()
const headers = getPreBuiltHeaders()
const stdioMcpServer = spawn(
'npx',
[
'-y',
'@deploxy/proxy',
'https://your-proxy.deploxy.com', // Your secure logic endpoint
'--headers',
...headers,
'--stdio-args',
...stdioArgs,
],
{ stdio: 'inherit' },
)
}
// This User-Facing Proxy -> [ DEPLOXY MAGIC ] -> Your Code
main()
You can run @deploxy/proxy
directly using npx
. Here is the basic command structure for connecting to a remote MCP server:
npx -y @deploxy/proxy "https://your-proxy-url.com" --headers "Content-Type: application/json" --stdio-args "example-api-key" "example-args"
<url>
: The endpoint URL of the remote Streamable HTTP MCP server you want to connect to.--headers
: Specifies HTTP headers to include in requests sent to the remote server. This is useful for passing authentication tokens or other metadata.--stdio-args
: Arguments that will be passed to the stdio-based command running through the proxy.@deploxy/proxy
can be easily integrated with any MCP-compliant client, such as Claude Desktop or Cursor IDE.
You can register the remote MCP server by adding the following configuration to your Claude Desktop settings file:
{
"mcpServers": {
"deploxy-proxy": {
"command": "npx",
"args": [
"-y",
"@deploxy/proxy",
"https://your-mcp-server.example.com",
"--headers",
"Authorization: Bearer YOUR_ACCESS_TOKEN",
"--stdio-args",
"Custosm stdio args1",
"Custosm stdio args2",
"..."
]
}
}
}
Cursor IDE can be configured in a similar way. Add the following to your mcp configs file:
{
"mcpServers": {
"deploxy-proxy": {
"command": "npx",
"args": [
"-y",
"@deploxy/proxy",
"https://your-mcp-server.example.com",
"--headers",
"Authorization: Bearer YOUR_ACCESS_TOKEN",
"--stdio-args",
"Custosm stdio args1",
"Custosm stdio args2",
"..."
]
}
}
}
FAQs
Run MCP stdio servers over Streamable HTTP
The npm package @deploxy/proxy receives a total of 67 weekly downloads. As such, @deploxy/proxy popularity was classified as not popular.
We found that @deploxy/proxy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.
Security News
A critical flaw in the popular npm form-data package could allow HTTP parameter pollution, affecting millions of projects until patched versions are adopted.
Security News
Bun 1.2.19 introduces isolated installs for smoother monorepo workflows, along with performance boosts, new tooling, and key compatibility fixes.