@ducnguyen67201/mcp-proxy
AMCP server package @featherlane-ai/mcp-proxy
Install
agr install @ducnguyen67201/mcp-proxy --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@featherlane-ai/mcp-proxy", "version": "0.0.0", "private": true, "description": "Transparent approval-enforcing proxy for one downstream MCP server.", "license": "Apache-2.0", "type": "module", "bin": { "featherlane-ai-mcp-proxy": "./dist/index.js" }, "scripts": { "build": "tsc", "start": "node dist/index.js", "typecheck": "tsc --noEmit", "test": "vitest run" }, "dependencies": { "@modelcontextprotocol/sdk": "1.29.0", "@featherlane-ai/sdk": "workspace:*", "zod": "4.4.3" }, "devDependencies": { "@types/node": "25.6.2", "typescript": "6.0.3", "vitest": "^3.2.6" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-637d8724c3402026-08-03