This release introduces tool-level security quarantine and multiple routing modes, enabling safer and more flexible MCP server integration.
New Features
Tool Quarantine System
- Tools from MCP servers now require explicit approval before execution, protecting against malicious or changed tools
- Visual tool inspection UI showing tool definitions and changes between versions
- Automatic approval for trusted servers via
skip_quarantineconfiguration option - Quarantine statistics visible in Dashboard, CLI, and server management interfaces
- Activity logging for all tool approval events
- New
quarantine_securityMCP tool for programmatic tool management - CLI commands:
mcpproxy inspectandmcpproxy approvefor tool review
Routing Modes
- Three distinct routing endpoints with focused tool sets:
- Direct mode (
/mcp/direct): Standard MCP passthrough - Call mode (
/mcp/call): Includes code_execution tool - Code execution mode (
/mcp/code_execution): Code execution only
- Direct mode (
- Routing mode displayed in status, doctor output, and Web UI
- Per-mode MCP server instances for isolation
Code Execution Enhancements
- TypeScript language support added to code_execution tool
- ES2020+ JavaScript features now supported (upgraded Goja runtime)
- Simplified tool description for better discoverability
Teams Edition
- Admin server management with per-user agent tokens
- OAuth authentication support
- Multi-user routing with workspace isolation
- Per-user preferences and activity log isolation
- Shared server toggle for workspace collaboration
- Complete UX redesign for multi-user workflows
Bug Fixes
- Fixed MCP endpoints dropdown not opening due to CSS overflow clipping
- Resolved stale quarantine counts after tool approval by refreshing server data
- Auto-approve tools for non-quarantined servers during upgrades
- Fixed health calculator incorrectly suggesting 'login' for offline non-OAuth servers
- Reduced tray notification noise by moving server polling to debug level
- Removed broken Docusaurus internal documentation link
Breaking Changes
- Product renamed from "Teams" to "Server" edition across all interfaces and documentation
Download Installers
| Platform | Download | Notes |
|---|---|---|
| macOS (Apple Silicon) | Download DMG | Signed & Notarized - Recommended for M1/M2/M3/M4 |
| macOS (Intel) | Download DMG | Signed & Notarized |
| Windows (64-bit) | Download Setup | Setup wizard |
| Windows (ARM64) | Download Setup | For ARM Windows devices |
| Linux (AMD64) | Download tar.gz | Binary package |
| Linux (ARM64) | Download tar.gz | For ARM Linux |
Homebrew (macOS/Linux):
brew install smart-mcp-proxy/mcpproxy/mcpproxyOther download options (auto-update URLs, archives)
Auto-update URLs (always points to latest):
Binary archives (this version):
Installation Instructions
Windows
- Download the installer for your architecture
- Run
mcpproxy-setup-*.exe - Follow the installation wizard (requires Administrator privileges)
- Launch "MCPProxy" from Start Menu
macOS
- Download the signed DMG for your Mac
- Double-click the DMG to mount it
- Double-click the PKG installer inside
- Follow the installation wizard
- Launch mcpproxy.app from Applications folder
Linux / Manual Installation
- Download the appropriate archive
- Extract:
tar -xzf mcpproxy-*.tar.gz - Make executable:
chmod +x mcpproxy - Run:
./mcpproxy serve
Platform Support & Usage
Platform Support
- macOS: Full system tray support with menu and icons
- Windows: Full system tray support with menu and icons
- Linux: Headless mode only (CLI)
Usage
GUI (Recommended):
- Launch mcpproxy.app from Applications (auto-starts core server)
- Manages server via system tray menu
CLI:
mcpproxy serve # Start server
mcpproxy serve --listen 127.0.0.1:8081 # Custom port
export MCPPROXY_API_KEY=your-secret-key # Set API key