
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@mcpspend/proxy
Advanced tools
Transparent proxy CLI for MCP servers — tracks tool calls, latency, and cost via MCPSpend.
One-command observability for MCP (Model Context Protocol) servers.
Detects every MCP client installed on your machine — Claude Desktop, Cursor, Windsurf, VS Code, Claude Code — and transparently wraps each configured server so MCPSpend can attribute tool calls, latency and cost. The proxy never blocks the MCP wire: if our API is unreachable, your agent keeps working.
npx @mcpspend/proxy init --key mcps_live_xxx
That single command:
~/.mcpspend/config.json (mode 0600).mcpServers entry to be wrapped by npx -y @mcpspend/proxy wrap -- (so the moment you restart your MCP client, it auto-fetches the proxy if missing)..mcpspend.bak backup next to every file it touches.Prefer a global binary?
npm install -g @mcpspend/proxythen usemcpspend init— everything below works the same way.
Restart your clients (Claude Desktop, Cursor, Windsurf, etc.) and head to mcpspend.com — calls start showing up within a minute.
Get an API key at mcpspend.com/dashboard/keys.
npx @mcpspend/proxy doctor
Reports API key status, endpoint reachability, and for every detected client: how many MCP servers are configured and how many are wrapped.
npx @mcpspend/proxy init --unwrap
Restores every wrapped entry to its original command + args. The .mcpspend.bak files are left in place for paranoia.
| Client | Config path (detected automatically) |
|---|---|
| Claude Desktop | %APPDATA%\Claude\claude_desktop_config.json · ~/Library/Application Support/Claude/claude_desktop_config.json |
| Cursor | ~/.cursor/mcp.json |
| Windsurf | ~/.codeium/windsurf/mcp_config.json |
| VS Code (user) | %APPDATA%\Code\User\mcp.json · ~/.config/Code/User/mcp.json |
| Claude Code | ~/.claude.json |
If you want to wrap one specific invocation without touching client configs:
npx @mcpspend/proxy wrap --key mcps_live_xxx -- npx @modelcontextprotocol/server-filesystem /data
Or paste this into a client config yourself:
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": ["-y", "@mcpspend/proxy", "wrap", "--", "npx", "@modelcontextprotocol/server-filesystem", "/Users/me"]
}
}
}
CLI flags, environment variables, and ~/.mcpspend/config.json are merged in that order (CLI wins).
| Setting | Flag | Env var | Config key |
|---|---|---|---|
| API key | --key | MCPSPEND_API_KEY | apiKey |
| API endpoint | --endpoint | MCPSPEND_ENDPOINT | endpoint |
| Project ID | --project | MCPSPEND_PROJECT_ID | projectId |
| Agent name | --agent | MCPSPEND_AGENT_NAME | agentName |
| Disable tracking | --disable | MCPSPEND_DISABLED=1 | disabled: true |
The API key is never written into client config files (which often land in dotfile repos). It lives only in ~/.mcpspend/config.json (mode 0600) or MCPSPEND_API_KEY.
The proxy reports:
read_file)filesystem)It does not send the actual tool arguments or response bodies to MCPSpend.
support@mcpspend.com · mcpspend.com
© NewRzs SRL · CUI RO48756557
FAQs
Transparent proxy CLI for MCP servers — tracks tool calls, latency, and cost via MCPSpend.
We found that @mcpspend/proxy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.