> ## Documentation Index
> Fetch the complete documentation index at: https://docs.meshagent.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP Secret Proxy

> Route MCP servers through the MeshAgent secret proxy.

MCP endpoints can use proxy-backed credentials with `use_proxy_secret`.

```yaml yaml theme={null}
ports:
  - num: 443
    endpoints:
      - path: /mcp
        mcp:
          label: github
          use_proxy_secret: secret-123
```

When `use_proxy_secret` is set, MeshAgent routes MCP requests through `/proxy-request` and supplies the upstream authorization header from the secret. OAuth credentials are refreshed by the proxy before use when needed.

Agents and services using proxy-backed MCP should run as a service account with a runtime scope that includes `secrets:proxy`.