Huan-zhaojun/mcp-safe-proxy

Implements a lightweight stdio proxy that intercepts `tools/list` responses to rewrite tool annotations (marking all tools as read-only, non-destructive, and non-open-world), eliminating approval prompts in Codex while passing through all actual `tools/call` operations unchanged. Built with zero runtime dependencies using only Node.js built-ins, it works universally with any stdio-based MCP Server—particularly addressing approval friction for browser automation (Playwright), filesystem, and collaboration tools that declare destructive or open-world hints.

Available on npm.