Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

proxy

package

Go to main page

Versions in this module

v0

v0.3.1

Mar 4, 2026

v0.3.0

Mar 4, 2026

Changes in this version

+ func RegisterGrantHosts(grant string, hosts []string)

+ type ContextResolver func(token string) (*RunContextData, bool)

+ type CredentialHeader = credentialHeader

+ type ExtraHeader = extraHeader

+ type HostPattern = hostPattern

+ func ParseHostPattern(pattern string) HostPattern

type Proxy

+ func (p *Proxy) AddRelay(name, targetURL string) error

+ func (p *Proxy) ResolveContext(token string) (*RunContextData, bool)

+ func (p *Proxy) SetContextResolver(resolver ContextResolver)

type RequestLogData

+ RunID string

+ type RunContextData struct

+ AWSHandler http.Handler

+ AllowedHosts []hostPattern

+ CredStore credential.Store

+ Credentials map[string]credentialHeader

+ ExtraHeaders map[string][]extraHeader

+ MCPServers []config.MCPServerConfig

+ Policy string

+ RemoveHeaders map[string][]string

+ ResponseTransformers map[string][]credential.ResponseTransformer

+ RunID string

+ TokenSubstitutions map[string]*tokenSubstitution

type Server

+ func (s *Server) SetPort(port int)

+ type TokenSubstitution = tokenSubstitution

+ func NewTokenSubstitution(placeholder, realToken string) *TokenSubstitution

v0.2.0

Feb 11, 2026

v0.1.0

Feb 8, 2026

Changes in this version

+ const MaxBodySize

+ func FilterHeaders(headers http.Header, authInjected bool, injectedHeaderName string) map[string]string

+ func GetHostsForGrant(grant string) []string

+ type AWSCredentialHandler struct

+ func (h *AWSCredentialHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type AWSCredentialProvider struct

+ func NewAWSCredentialProvider(ctx context.Context, roleARN, region string, sessionDuration time.Duration, ...) (*AWSCredentialProvider, error)

+ func (p *AWSCredentialProvider) GetCredentials(ctx context.Context) (*AWSCredentials, error)

+ func (p *AWSCredentialProvider) Handler() http.Handler

+ func (p *AWSCredentialProvider) Region() string

+ func (p *AWSCredentialProvider) RoleARN() string

+ func (p *AWSCredentialProvider) SetAuthToken(token string)

+ type AWSCredentials struct

+ AccessKeyID string

+ Expiration time.Time

+ SecretAccessKey string

+ SessionToken string

+ type CA struct

+ func NewCA(caDir string) (*CA, error)

+ func (ca *CA) CertPEM() []byte

+ func (ca *CA) GenerateCert(host string) (*tls.Certificate, error)

+ type Proxy struct

+ func NewProxy() *Proxy

+ func (p *Proxy) AddExtraHeader(host, headerName, headerValue string)

+ func (p *Proxy) AddResponseTransformer(host string, transformer credential.ResponseTransformer)

+ func (p *Proxy) RemoveRequestHeader(host, headerName string)

+ func (p *Proxy) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ func (p *Proxy) SetAWSHandler(h http.Handler)

+ func (p *Proxy) SetAuthToken(token string)

+ func (p *Proxy) SetCA(ca *CA)

+ func (p *Proxy) SetCredential(host, authHeader string)

+ func (p *Proxy) SetCredentialHeader(host, headerName, headerValue string)

+ func (p *Proxy) SetCredentialStore(store credential.Store)

+ func (p *Proxy) SetCredentialWithGrant(host, headerName, headerValue, grant string)

+ func (p *Proxy) SetLogger(logger RequestLogger)

+ func (p *Proxy) SetMCPServers(servers []config.MCPServerConfig)

+ func (p *Proxy) SetNetworkPolicy(policy string, allows []string, grants []string)

+ func (p *Proxy) SetTokenSubstitution(host, placeholder, realToken string)

+ type RequestLogData struct

+ AuthInjected bool

+ Duration time.Duration

+ Err error

+ InjectedHeaderName string

+ Method string

+ RequestBody []byte

+ RequestHeaders http.Header

+ ResponseBody []byte

+ ResponseHeaders http.Header

+ StatusCode int

+ URL string

+ type RequestLogger func(data RequestLogData)

+ type STSAssumeRoler interface

+ AssumeRole func(ctx context.Context, params *sts.AssumeRoleInput, optFns ...func(*sts.Options)) (*sts.AssumeRoleOutput, error)

+ type Server struct

+ func NewServer(proxy *Proxy) *Server

+ func (s *Server) Addr() string

+ func (s *Server) Port() string

+ func (s *Server) Proxy() *Proxy

+ func (s *Server) SetBindAddr(addr string)

+ func (s *Server) Start() error

+ func (s *Server) Stop(ctx context.Context) error