Michal 0995851810 feat: remove proxyMode — all traffic goes through mcplocal proxy ...

proxyMode "direct" was a security hole (leaked secrets as plaintext env
vars in .mcp.json) and bypassed all mcplocal features (gating, audit,
RBAC, content pipeline, namespacing). Removed from schema, API, CLI,
and all tests. Old configs with proxyMode are accepted but silently
stripped via Zod .transform() for backward compatibility.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:36:36 +00:00

26 KiB

Raw Blame History

View Raw