Reverse Proxy
Run MCPProxy behind nginx or Caddy — fix "403 Forbidden: invalid Host header" with trusted_hosts, honour X-Forwarded-* only from trusted_proxies, and secure the exposed endpoint.
Deploying for a Team
Run the server edition (mcpproxy-server) on Kubernetes behind an ingress with Keycloak SSO: single-replica Deployment, group-based access, audit-to-stdout, probes, and the persistent-volume rule for --config/--data-dir.
Compose with Sidecars
Run mcpproxy in Docker Compose with each stdio MCP server in its own sidecar container on an internal network, so a compromised stdio package cannot read the data volume, the API key or the OAuth token database.
Shutdown Behavior
How MCPProxy handles graceful shutdown of upstream servers and subprocesses
Observability
Export Prometheus metrics and OpenTelemetry traces from MCPProxy to your own monitoring stack.
Logging
Log file locations per OS, log levels, rotation, and per-server log files.
Socket Communication
Platform-specific local IPC between the tray application and the core server.
Registries
The built-in set of MCP server registries used by search_servers and list_registries.
Linux package repos
How the apt.mcpproxy.app and rpm.mcpproxy.app repositories work — retention, pinning, mirroring, troubleshooting.
Linux package repos — ops
Maintainer runbook for apt.mcpproxy.app / rpm.mcpproxy.app — infra layout, key rotation, manual republish, bad-version purge.
Prerelease Builds
Automated prerelease builds from the next branch with signed and notarized macOS installers.