---
title: "mcp-security-proxy"
description: "Installable Agent Plugins demo for the deny-by-default MCP Security Proxy."
canonical: https://agentpluginsdirectory.com/plugins/mcp-security-proxy
last-updated: 2026-11-07
---

# mcp-security-proxy
Installable Agent Plugins demo for the deny-by-default MCP Security Proxy.
- Slug: mcp-security-proxy
- Publisher: 0disoft
- Repository: https://github.com/0disoft/mcp-security-proxy
- Manifest: agent-plugin/plugin.json
- Version: 0.2.0-alpha.5
- License: Apache-2.0
- Category (editorial): security
- Skills: 0
- MCP servers: 1 (mcp-security-proxy-demo)
- Stars: 2
- Repository created: 2026-07-06
- Repository last pushed: 2026-10-18
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/mcp-security-proxy
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What mcp-security-proxy does, in the publisher's words

Status: installable self-contained demo, not a general production proxy preset.

This directory implements the Agent Plugins 1.0.0 plugin.json and mcp.json shape. It packages a deny-by-default policy and a fixed, side-effect-free MCP server so the compatibility artifact can be installed and run without an MCP Security Proxy repository checkout.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/0disoft/mcp-security-proxy/HEAD/agent-plugin/README.md

## MCP servers

- mcp-security-proxy-demo: transport: stdio; command: node ${PLUGIN_ROOT}/node_modules/@0disoft/mcp-security-proxy-cli/dist/main.js run --policy ${PLUGIN_ROOT}/config/demo-policy.json --profile agent-plugin-demo --audit-log ${PLUGIN_DATA}/mcp-security-pr

Read from the plugin's own mcp.json. Environment variable names only, never values.