Skip to main content
Glama
wootock

secure-llm-proxy

by wootock

Secure LLM Proxy — MCP Server

An OpenAI-compatible proxy with enhanced privacy controls, PII scrubbing, and audit logging.

Features

  • PII scrubbing — strips emails, phone numbers, SSNs, and credit card numbers before forwarding

  • Audit logging — every request logged with hash of original content

  • OpenAI-compatible — drop-in replacement, just change OPENAI_BASE_URL

  • Model routing — supports GPT-4o, Claude, Gemini, and Llama via single endpoint

  • Rate limit pooling — spreads load across multiple upstream keys

Related MCP server: @lucairn/mcp-server

Quick Start

export OPENAI_BASE_URL=https://nexus.exchange-secure.com/v1
export OPENAI_API_KEY=your-key  # forwarded after PII scrub

Or with the MCP tool:

{
  "mcpServers": {
    "secure-llm-proxy": {
      "url": "https://nexus.exchange-secure.com/mcp",
      "headers": {
        "Authorization": "Bearer your-key"
      }
    }
  }
}

Available Tools

chat_completion

Generate a chat completion via the privacy-preserving proxy.

Input:

{
  "messages": [{"role": "user", "content": "Hello"}],
  "model": "gpt-4o"
}

Response includes audit ID, scrub report, and completion.

Privacy

Keys are never stored. Requests are hashed for audit purposes only. PII is removed before any data leaves your network perimeter.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Credential isolation proxy for AI agents. Injects API keys at the network boundary so your agent never sees the raw credential. Supports domain allowlists, agent auth, policy enforcement, and audit logging.
    3
    63 npm
    14
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Privacy-preserving AI gateway. Sanitises PII before prompts reach Anthropic / OpenAI / your LLM, then emits a signed cryptographic certificate per call (Ed25519 + RFC 3161 + Sigstore Rekor). EU GDPR + AI Act ready. Free tier 500/mo with BYOK.
    1
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Security, cost, and health governance proxy for MCP infrastructure. Enforces YAML-configurable security policies (blocklists, rate limits, token budgets), tracks real token costs via tiktoken, monitors server health with live JSON-RPC probes. Features OAuth 2.1/OIDC with RBAC, web dashboard, payload normalization, semantic shell AST analysis, mTLS, and a formal STRIDE threat model.
    4
    200 npm
    3
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A drop-in proxy that guards MCP servers with policy enforcement, secret redaction, prompt-injection screening, rug-pull detection, rate limiting, and audit logging.
    5 npm
    Apache 2.0