Add MCP Zero-Trust Proxy (open-source auth + RBAC proxy)

[AnobleSCM]

What

MCP Zero-Trust Proxy is a free, open-source reverse proxy that adds zero-trust security to any MCP server without code changes.

Features

• OAuth 2.1 PKCE authentication (GitHub, Google, Okta, any OIDC provider)
• Tool-level RBAC (admin/readonly/restricted roles)
• Per-client session isolation
• Structured JSONL audit logging with file rotation
• Per-client rate limiting (token bucket)
• Single Go binary (~10MB) or Docker container (6.6MB image)

Why it belongs in awesome-mcp-security

Addresses documented MCP security gaps: 8,000+ exposed servers, 30+ CVEs in 60 days, OWASP MCP Top 10. Fills the "auth proxy / gateway" category specifically for MCP deployments.

Links

• GitHub: https://github.com/AnobleSCM/mcp-zero-trust-proxy
• Quick start: https://github.com/AnobleSCM/mcp-zero-trust-proxy/blob/main/docs/QUICKSTART.md
• License: MIT
• Tests: 236+ (unit + integration + E2E, go test -race passes)