z.ai MCP endpoints via local proxy

What we wanted

• Allow apps to use z.ai MCP servers without configuring z.ai keys in those apps.
• Keep secrets out of URLs (avoid query-string auth).
• Make each MCP capability toggleable.

What we got

When proxy.zai.mcp.enabled=true, the proxy can expose MCP endpoints under its own base URL.

1) Web Search (remote reverse-proxy)

Local endpoint:

• /mcp/web_search_prime/mcp

Upstream:

• https://api.z.ai/api/mcp/web_search_prime/mcp

Implementation:

• Handler: src-tauri/src/proxy/handlers/mcp.rs (handle_web_search_prime)

2) Web Reader (remote reverse-proxy)

Local endpoint:

• /mcp/web_reader/mcp

Upstream:

• https://api.z.ai/api/mcp/web_reader/mcp

Implementation:

• Handler: src-tauri/src/proxy/handlers/mcp.rs (handle_web_reader)

3) Vision MCP (built-in server)

Local endpoint:

• /mcp/zai-mcp-server/mcp

Implementation:

• Route wiring: src-tauri/src/proxy/server.rs
• Handler: src-tauri/src/proxy/handlers/mcp.rs (handle_zai_mcp_server)
• Session state: src-tauri/src/proxy/zai_vision_mcp.rs
• Tool execution: src-tauri/src/proxy/zai_vision_tools.rs

Auth model

• Local proxy auth (if enabled) is handled by the proxy middleware:
  • src-tauri/src/proxy/middleware/auth.rs
• z.ai auth is always injected upstream by the proxy using proxy.zai.api_key.
• No z.ai key needs to be configured in MCP clients that point at the local endpoints.

UI wiring

The MCP toggles and local endpoints are shown in:

• src/pages/ApiProxy.tsx

Validation

1. Enable proxy.zai.enabled=true and set proxy.zai.api_key.
2. Enable:
   • proxy.zai.mcp.enabled=true
   • any subset of {web_search_enabled, web_reader_enabled, vision_enabled}
3. Start the proxy and point an MCP client at the corresponding local endpoint(s).