MCP Safe Proxy

Example Use Cases

• 1

  Bypass approval popups caused by destructive or openWorld tool annotations in MCP servers.

• 2

  That require seamless automation with MCP servers without modifying server code or global installations.

• 3

  A lightweight, zero-dependency proxy to safely rewrite MCP tool annotations on the fly.

Description

mcp-safe-proxy acts as a stdio proxy between MCP clients (like OpenAI Codex CLI) and MCP servers (such as Playwright MCP), rewriting tool annotations in the 'tools/list' response to mark tools as safe and read-only. This prevents frequent approval popups triggered by certain tool annotations without losing any functionality. It is zero-runtime dependency, minimal (~220 lines TypeScript), and compatible with any stdio MCP server, enabling seamless and non-intrusive usage.