Proxyllm MCP server
ai.proxyllm/proxyllm-mcp·v1.0.2OpenAI-compatible LLM gateway: models, savings math, key provisioning, autonomous email-OTP signup
0 stars62 downloads/wk
Reviews
Write oneNobody has reviewed Proxyllm yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Proxyllm tools (9, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
proxyllm_accountGET /v1/organizations/me. Works while unpaid: plan is "free" plus a payment block until the operator activates the membership, then "pro". Poll this after handing over the checkout link.
proxyllm_create_routing_keywrite actionMints a pllm_ routing key (returned once) for OPENAI_API_KEY-style use against the gateway. Optionally wires the provider chain in the same call; discover wireable lane ids with proxyllm_list_routing_keys include_lanes.
proxyllm_introspect_keyGET /v1/key: the key's provider lanes, reachable models, whether a Codex subscription backs it, and monthly budget state. Authed by the routing key itself.
proxyllm_list_modelsOpenAI-shaped model list from the gateway. No auth required; with a routing key it reflects that key's lanes, including the live Codex catalog.
proxyllm_list_routing_keysLists the account's routing keys. include_lanes adds the wireable lanes (connected Codex sessions, bridges, saved provider keys) with the ids provider chains reference.
proxyllm_savings_calculatorGiven a monthly OpenAI API bill in USD, returns the ChatGPT/Codex subscription tier that absorbs that workload through ProxyLLM Codex Hosted, the flat total (subscription + $129 fee), and the monthly savings. Free, no auth.
proxyllm_signupStarts autonomous account creation: a 6-digit code is emailed to the operator's inbox (no captcha, no browser). New accounts are unpaid and are removed after 48 hours unless a human activates the membership. Follow with proxyllm_verify_signup.
proxyllm_usageGET /v1/organizations/usage for the account.
proxyllm_verify_signupExchanges the 6-digit code for an sk_ account token. The token is returned exactly once: store it (PROXYLLM_ACCOUNT_TOKEN). While the account is unpaid the response carries a checkout link to relay to the operator.
Public scan report
scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 73 days ago12/15
- Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10
How Proxyllm compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 916 Email servers
- Tools
- 9
- the typical Email server has 7
- Tools that change things
- 11%
- typical: 25%. Fewer write tools means less an agent can break
- Downloads a week
- 62
- more than 46% of 235 Email servers with a package
What its tools let an agent do: 8 read · 1 change
Install Proxyllm in Claude Code, Cursor or VS Code
Runs npx -y proxyllm-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add proxyllm-mcp -- npx -y proxyllm-mcp
What the publisher says
From the Proxyllm repository's README, as published. We do not edit it. Read it on GitHub
proxyllm-mcp
MCP server for ProxyLLM, the OpenAI-compatible LLM gateway. It gives any MCP client (Claude Code, Claude Desktop, Cursor, Cline, Windsurf, OpenClaw) live model catalogs, plan-savings math, routing-key introspection and provisioning, and an account signup flow an agent can complete on its own: email OTP in, sk_ account token out, HTTP 402 with a checkout link until a human activates the membership.
Install
Claude Code:
claude mcp add proxyllm -- npx -y proxyllm-mcpCursor, Cline, Claude Desktop, or any client that takes a JSON server entry:
{
"mcpServers": {
"proxyllm": {
"command": "npx",
"args": ["-y", "proxyllm-mcp"]
}
}
}No configuration is required to start. Two optional environment variables save passing tokens per call:
- PROXYLLMACCOUNTTOKEN: an sk (read+write) or rk (read-only) account token for the management tools.
- PROXYLLMROUTINGKEY: a pllm_ routing key for key introspection and key-scoped model lists.
Tools
Free, no account needed:
- proxyllmsavingscalculator: monthly OpenAI API bill in, subscription tier + flat total + monthly savings out.
- proxyllmlistmodels: OpenAI-shaped model list from the gateway.
- proxyllmintrospectkey: what a routing key can do (lanes, models, budget, whether a Codex subscription backs it).
Account flow (an agent can run this end to end):
- proxyllm_signup: emails a 6-digit code to the operator's inbox. No captcha.
- proxyllmverifysignup: exchanges the code for the sk_ account token (returned once).
- proxyllm_account: account state; while unpaid it carries the checkout link and a message written to be relayed to the operator. Poll until plan is "pro".
Provisioning (paid accounts):
- proxyllmcreateroutingkey: mints a pllm key, optionally wiring its provider chain (Codex subscription seats, self-hosted Claude Code bridges, metered API keys) in the same call.
- proxyllmlistroutingkeys: keys, plus the wireable lane ids with includelanes.
- proxyllm_usage: 30-day usage summary.
Unpaid accounts get 402 payment_required on management tools by design; the body names the price ($129/mo flat), the checkout URL, and the 48-hour removal deadline for never-activated accounts. Error bodies are returned verbatim because they contain the next step.
Links
- Agent auth manifest:
- OpenAPI:
- Docs:
- Agent card:
MIT license.
Nothing above is checked by us. What we check is on the safety report.
Proxyllm: common questions
- Is Proxyllm MCP server safe?
- Mostly: it is graded B (75/100). Read the Proxyllm safety report
- How do I install Proxyllm?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Proxyllm need an API key?
- Yes. The registry entry asks for
PROXYLLM_ACCOUNT_TOKEN,PROXYLLM_ROUTING_KEY. - Is Proxyllm maintained?
- The last commit was 112 days ago (2026-07-15). The latest release is v1.0.2.
- What can I use instead of Proxyllm?
- Servers from other publishers that do the same job: e2a — email for AI agents MCP server, e2a — email for AI agents MCP server and Impreza Host MCP server.
- How does Proxyllm compare with other Email MCP servers?
- safety score 75/100 (higher than 45% of 916 Email servers); tools 9 (the typical Email server has 7); tools that change things 11% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Proxyllm
Same job from other publishers: the closest match first, then the best rated.
- e2a — email for AI agentsAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.not reviewedEstablishedA
- e2a — email for AI agentsAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.not reviewedEstablishedA
Impreza HostNo-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor.not reviewedGrowingB- SendravenEmail infrastructure for AI agents: send, read replies as threads, campaigns, per-key limits.not reviewedGrowingB
ContrastAPI55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.not reviewedGrowingB