LightNow MCP Proxy

by lightnow-ai

Not rated
GitHub

About

Connect your AI clients to your MCP servers—securely managed in one place.

Details

Author
lightnow-ai
Categories
Developer Tools

Setup

Install LightNow MCP Proxy in your MCP client (Claude Desktop, Cursor, Windsurf, and others).

Repository: https://github.com/lightnow-ai/lightnow-proxy

Follow the installation instructions in the repository README, then restart your MCP client.

Connect your AI clients to your MCP servers—securely managed in one place.

The LightNow MCP Proxy is the local runtime behind LightNow profiles. Connect Codex, Claude Desktop, Cursor, VS Code, or Antigravity once, then manage the MCP servers available to that client in LightNow instead of copying server configuration and secrets into every tool.

- Keep MCP access organized in personal and organization profiles.
- Connect localstdioand remote Streamable HTTP servers through one entry.
- Resolve credentials on the user's machine instead of embedding them in MCP client configuration.
- Apply profile and policy changes without rebuilding every client setup.
- Observe client, profile, server health, and tool usage. Tool arguments are captured by default with credential-like fields redacted and can be disabled; tool results and resolved secrets are never collected.

The installed command remainslightnow-proxy. It runs locally, uses the identity-bound LightNow CLI session, resolves the selected profile, and routes tool and resource requests to the profile's MCP servers.

Capabilities come from your LightNow profile

The proxy deliberately does not ship demo tools. Its MCP capabilities are the real tools and resources exposed by the servers selected in the active LightNow profile, so the list differs between teams and clients. Names such asgithub__create_issueidentify both the upstream server and its tool and avoid collisions when several servers use the same tool name.

The proxy supports the official MCP2026-07-28revision with stateless, per-request protocol metadata andserver/discover. It keeps automatic compatibility with handshake-era servers and clients through2025-11-25.

- Python 3.11 or higher
- pipx
- aLightNow account
- the LightNow CLI

pipx install lightnow-cli lightnow login
brew tap lightnow-ai/tap brew install lightnow-proxy

The Python package installs thelightnow-proxycommand used by MCP clients.

Update supported CLI and Proxy installations through the LightNow CLI:

Homebrew, pipx and uv are managed. The proxy only reports its observed version and update state in metadata-only heartbeats; it never invokes a package manager or delays MCP startup to check for releases.

Use the LightNow CLI. It writes the client MCP entry and the per-client Local Proxy config.

lightnow sync --client codex --local-proxy lightnow sync --client claude-desktop --local-proxy lightnow sync --client cursor --local-proxy lightnow sync --client vscode --local-proxy lightnow sync --client antigravity --local-proxy

Use a distinct--connectionalias for every account, organization or profile that should appear in the same MCP client:

Each generated proxy config has a stable connection ID and points to one named CLI session under~/.lightnow/sessions/. It also records the expected issuer and subject. The proxy refuses Registry requests when those values do not match, so a later CLI login cannot silently switch an existing connection. No access or refresh token is written to the proxy YAML.

Check whether the proxy can resolve the selected profile and reach its upstream MCP servers:

lightnow-proxy --health lightnow-proxy --health --json

By default this reads~/.lightnow/lightnow-proxy/default.yaml, which is written when the default profile is synced into Local Proxy mode. For a client-specific config, pass the generated path explicitly:

lightnow-proxy --config ~/.lightnow/lightnow-proxy/codex.yaml --health lightnow-proxy --config ~/.lightnow/lightnow-proxy/codex.yaml --health --json

Named connections use separate files such as~/.lightnow/lightnow-proxy/codex-lightnow-acme.yaml. The JSON health report shows their non-secret connection alias, ID, account label, scope, profile and identity-binding status. Legacy configs that usecli_config_pathremain readable, but are restricted to the configured authentication issuer.

When telemetry is enabled, active health checks and runtime events are sent to the LightNow Control Plane. Tool-call arguments are captured by default and can be disabled independently in the Local Proxy settings. Credential-like fields are redacted before transmission. The proxy also sends device presence immediately at startup and every two minutes. The Control Plane can then show which devices, clients and profiles are active, healthy, degraded, or failing, along with CLI/Proxy versions and update status. Tool results, resolved LightNow secrets, unredacted authorization values, network addresses, hardware identifiers and local paths are not stored. Credential-like argument fields, including authorization headers, are replaced with[REDACTED]before transmission.

Vault providers configured for runtime resolution are resolved on this host, after Registry API has returned a provider reference without credentials or a secret value. HashiCorp Vault Proxy auto-auth on127.0.0.1:8200is the default. Provider-specific loopback listeners can be mapped underruntime_secrets.providersin the generated YAML; LightNow CLI preserves these non-secret mappings on subsequent syncs. The optional OS-keyring path is available withlightnow-proxy[keyring]. Resolution failures are fail-closed and plaintext values are never added to the tool-schema cache.

Detailed setup guides, examples, diagrams, supported client paths, telemetry behavior and troubleshooting live in the LightNow docs:

- Connect MCP clients
-
CLI reference
-
Release process

For contributors working on this repository:

uv venv uv pip install -e .[dev] make test
uv run lightnow-proxy --config config.example.yaml
uv run lightnow-proxy --config config.example.yaml --transport stdio

Run a local health check against the example config:

uv run lightnow-proxy --config config.example.yaml --health

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Create crafted UI components inspired by the best 21st.dev design engineers.

Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server

An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .

MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent

ALAPI MCP Tools,Call hundreds of API interfaces via MCP

AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform

MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.

APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.

One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.

Build and deploy full-stack Next.js apps with 98 tools for React, AWS, and MongoDB

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.