resource-proxy

Overview ¶

Command resource-proxy fronts a service that knows nothing about sluis with a sluis resource server's front door: it verifies the caller's token, serves the RFC 9728 metadata, writes an audit line per request, and proxies to the service -- and, optionally, gives the service an identity of its own for what it calls in turn.

See docs/connect/mcp.md, "Fronting a stock MCP server with resource-proxy". Every flag has an environment variable of the same name in upper case with underscores (--outbound-listen is OUTBOUND_LISTEN); a flag given wins.