📄️ Encryption & Data Protection
AuthProxy implements multiple layers of security to protect user data and prevent common attack vectors.
📄️ Rate Limiting
AuthProxy uses a shared fixed-window rate limiter for HTTP requests plus a separate bandwidth limiter for file transfer throughput.
📄️ User Scopes
AuthProxy uses a scope-based access control system to restrict which API routes a user can reach. A user's scopes field holds a space-separated list of route paths, and a route opts into the check with the ScopeCheck route flag.
📄️ MCP Access Model
How AuthProxy decides which MCP tools a session can call, what each login type sees, and why MCP must not be reused as a browser session.