mcp-proxy 5.12.5 → 6.1.8

package/.github/workflows/main.yaml

@@ -7,14 +7,11 @@ jobs:
   test:
     environment: release
     name: Test
-    strategy:
-      fail-fast: true
-      matrix:
-        node:
-          - 22
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      issues: write
+      pull-requests: write
       id-token: write
     steps:
       - name: setup repository
@@ -24,15 +21,10 @@ jobs:
       - uses: pnpm/action-setup@v4
         with:
           version: 9
-      - name: setup node.js
+      - name: Setup NodeJS
         uses: actions/setup-node@v4
         with:
-          cache: "pnpm"
-          node-version: ${{ matrix.node }}
-      - name: Setup NodeJS ${{ matrix.node }}
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ matrix.node }}
+          node-version: 24
           cache: "pnpm"
           cache-dependency-path: "**/pnpm-lock.yaml"
       - name: Install dependencies
@@ -45,4 +37,3 @@ jobs:
         run: pnpm semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/README.md

@@ -22,11 +22,14 @@ npm install mcp-proxy
 ### Command-line
 
 ```bash
-npx mcp-proxy --port 8080 --shell tsx server.js
+npx mcp-proxy --port 8080 --shell -- tsx server.js
 ```
 
 This starts a server and `stdio` server (`tsx server.js`). The server listens on port 8080 and `/mcp` (streamable HTTP) and `/sse` (SSE) endpoints, and forwards messages to the `stdio` server.
 
+> [!NOTE]
+> The `--` separator is required to separate mcp-proxy options from the command being proxied.
+
 options:
 
 - `--server`: Set to `sse` or `stream` to only enable the respective transport (default: both)
@@ -39,20 +42,9 @@ options:
 - `--debug`: Enable debug logging
 - `--shell`: Spawn the server via the user's shell
 - `--apiKey`: API key for authenticating requests (uses X-API-Key header)
-
-### Passing arguments to the wrapped command
-
-When wrapping a command that takes arguments starting with `-`, you must use `--` to prevent `mcp-proxy` from interpreting them as its own options. Everything after `--` is passed directly to the wrapped command.
-
-For example, to wrap a command that uses the `-v` flag:
-
-```bash
-# Wrong: mcp-proxy will try to parse -v as its own option
-npx mcp-proxy --port 8080 my-command -v
-
-# Correct: use -- to pass -v to my-command
-npx mcp-proxy --port 8080 -- my-command -v
-```
+- `--sslCa`: Filename to override the trusted CA certificates
+- `--sslCert`: Cert chains filename in PEM format
+- `--sslKey`: Private keys filename in PEM format
 
 ### Stateless Mode
 
@@ -68,10 +60,10 @@ Example usage:
 
 ```bash
 # Enable stateless mode
-npx mcp-proxy --port 8080 --stateless tsx server.js
+npx mcp-proxy --port 8080 --stateless -- tsx server.js
 
 # Stateless mode with stream-only transport
-npx mcp-proxy --port 8080 --stateless --server stream tsx server.js
+npx mcp-proxy --port 8080 --stateless --server stream -- tsx server.js
 ```
 
 > [!NOTE]
@@ -96,14 +88,14 @@ Authentication is disabled by default for backward compatibility. To enable it,
 **Command-line:**
 
 ```bash
-npx mcp-proxy --port 8080 --apiKey "your-secret-key" tsx server.js
+npx mcp-proxy --port 8080 --apiKey "your-secret-key" -- tsx server.js
 ```
 
 **Environment variable:**
 
 ```bash
 export MCP_PROXY_API_KEY="your-secret-key"
-npx mcp-proxy --port 8080 tsx server.js
+npx mcp-proxy --port 8080 -- tsx server.js
 ```
 
 #### Client Configuration
@@ -401,5 +393,5 @@ const transport = tapTransport(new StdioClientTransport(), (event) => {
 ### Running MCP Proxy with a local server
 
 ```bash
-tsx src/bin/mcp-proxy.ts --debug tsx src/fixtures/simple-stdio-server.ts
+tsx src/bin/mcp-proxy.ts --debug -- tsx src/fixtures/simple-stdio-server.ts
 ```

package/dist/bin/mcp-proxy.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { D as __toESM, E as __commonJSMin, a as startHTTPServer, i as Client, n as serializeMessage, o as proxyServer, r as Server, t as ReadBuffer, w as InMemoryEventStore } from "../stdio-DBuYn6eo.mjs";
+import { D as __toESM, E as __commonJSMin, a as startHTTPServer, i as Client, n as serializeMessage, o as proxyServer, r as Server, t as ReadBuffer, w as InMemoryEventStore } from "../stdio-BArgKxoc.mjs";
 import { createRequire } from "node:module";
 import { basename, dirname, extname, join, normalize, relative, resolve } from "path";
 import { format, inspect } from "util";
+import { readFileSync, readdirSync, statSync, writeFile } from "fs";
 import { setTimeout as setTimeout$1 } from "node:timers";
 import util from "node:util";
 import { notStrictEqual, strictEqual } from "assert";
-import { readFileSync, readdirSync, statSync, writeFile } from "fs";
 import { fileURLToPath } from "url";
 import { readFileSync as readFileSync$1, readdirSync as readdirSync$1 } from "node:fs";
 import { spawn } from "node:child_process";
@@ -5012,15 +5012,7 @@ var StdioClientTransport = class {
 //#region src/bin/mcp-proxy.ts
 util.inspect.defaultOptions.depth = 8;
 if (!("EventSource" in global)) global.EventSource = EventSource;
-const argv = await yargs_default(hideBin(process.argv)).scriptName("mcp-proxy").command("$0 <command> [args...]", "Run a command with MCP arguments").positional("command", {
-	demandOption: true,
-	describe: "The command to run",
-	type: "string"
-}).positional("args", {
-	array: true,
-	describe: "The arguments to pass to the command",
-	type: "string"
-}).env("MCP_PROXY").parserConfiguration({ "populate--": true }).options({
+const argv = await yargs_default(hideBin(process.argv)).scriptName("mcp-proxy").usage("$0 [options] -- <command> [args...]").env("MCP_PROXY").parserConfiguration({ "populate--": true }).options({
 	apiKey: {
 		describe: "API key for authenticating requests (uses X-API-Key header)",
 		type: "string"
@@ -5069,6 +5061,18 @@ const argv = await yargs_default(hideBin(process.argv)).scriptName("mcp-proxy").
 		describe: "The SSE endpoint to listen on",
 		type: "string"
 	},
+	sslCa: {
+		describe: "Filename to override the trusted CA certificates",
+		type: "string"
+	},
+	sslCert: {
+		describe: "Cert chains filename in PEM format",
+		type: "string"
+	},
+	sslKey: {
+		describe: "Private keys filename in PEM format",
+		type: "string"
+	},
 	stateless: {
 		default: false,
 		describe: "Enable stateless mode for HTTP streamable transport (no session management)",
@@ -5080,9 +5084,15 @@ const argv = await yargs_default(hideBin(process.argv)).scriptName("mcp-proxy").
 		type: "string"
 	}
 }).help().parseAsync();
-if (!argv.command) throw new Error("No command specified");
-const finalCommand = argv.command;
-const finalArgs = argv["--"] || argv.args;
+const dashDashArgs = argv["--"];
+if (!dashDashArgs || dashDashArgs.length === 0) {
+	console.error("Error: No command specified.");
+	console.error("Usage: mcp-proxy [options] -- <command> [args...]");
+	console.error("");
+	console.error("Example: mcp-proxy --port 8080 -- node server.js --port 3000");
+	process.exit(1);
+}
+const [finalCommand, ...finalArgs] = dashDashArgs;
 const connect = async (client) => {
 	const transport = new StdioClientTransport({
 		args: finalArgs,
@@ -5122,6 +5132,9 @@ const proxy = async () => {
 		host: argv.host,
 		port: argv.port,
 		sseEndpoint: argv.server && argv.server !== "sse" ? null : argv.sseEndpoint ?? argv.endpoint,
+		sslCa: argv.sslCa,
+		sslCert: argv.sslCert,
+		sslKey: argv.sslKey,
 		stateless: argv.stateless,
 		streamEndpoint: argv.server && argv.server !== "stream" ? null : argv.streamEndpoint ?? argv.endpoint
 	});