spm-mcp — MCP server for Secure Proxy Manager

A Model Context Protocol server that exposes the Secure Proxy Manager management API as tools — so an assistant/agent (e.g. Claude) can inspect and drive your self-hosted Secure Web Gateway: query traffic and analytics, manage block/allow lists, toggle WAF rule categories, and reload config.

Tools

The server is read-only by default. The mutating tools are registered only with SPM_MCP_READONLY=false. The read tools return traffic data that anyone whose requests cross the proxy can shape (URLs, domains, user agents), so text in a log row can try to instruct the model; with the mutating tools available, an auto-approved call could disable a WAF category or open egress. Traffic output is wrapped in {"untrusted_data_notice": ..., "data": ...}, and every tool carries MCP annotations (readOnlyHint, destructiveHint) for the client's approval prompt. If you enable the mutating tools, do not auto-approve them.

Configure

Run

With uv (no install):

SPM_URL=http://localhost:5001 SPM_USERNAME=admin SPM_PASSWORD=... \
  uvx --from . spm-mcp

Or in Claude Desktop / any MCP client — add to the MCP servers config:

{
  "mcpServers": {
    "secure-proxy-manager": {
      "command": "uvx",
      "args": ["spm-mcp"],
      "env": {
        "SPM_URL": "http://localhost:5001",
        "SPM_USERNAME": "admin",
        "SPM_PASSWORD": "your-password"
      }
    }
  }
}

Or as a container (see Dockerfile) — an optional mcp service can be added to the stack's compose profile.

MIT-licensed, part of Secure Proxy Manager.