MCP Bridge: A Lightweight, LLM-Agnostic RESTful Proxy for Model Context Protocol Servers
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Large Language Models (LLMs) are increasingly augmented with external tools through standardized interfaces like the Model Context Protocol (MCP). However, current MCP implementations face critical limitations: they typically require local process execution through STDIO transports, making them impractical for resource-constrained environments like mobile devices, web browsers, and edge computing. We present MCP Bridge, a lightweight RESTful proxy that connects to multiple MCP servers and exposes their capabilities through a unified API. Unlike existing solutions, MCP Bridge is fully LLM-agnostic, supporting any backend regardless of vendor. The system implements a risk-based execution model with three security levels-standard execution, confirmation workflow, and Docker isolation-while maintaining backward compatibility with standard MCP clients. However, reliable execution within this framework requires models that can strictly adhere to protocol schemas. To this end, we also fine-tuned the Qwen3 4B and 8B model family on the Agent-Ark/Toucan-1.5M dataset using four Reinforcement Learning techniques: Group Relative Policy Optimization (GRPO), Dr. GRPO, Beta Normalization Policy Optimization (BNPO), and Decoupled Clip and Dynamic sAmpling Policy Optimization (DAPO). Evaluated on the MCPToolBench++ benchmark, our optimized model achieves an F1 score of 73.0% that outperforms GPT-OSS-120B (62.17%) and remains competitive with the 70B+ parameter baselines. Evaluation demonstrates that MCP Bridge successfully addresses the constraints of direct MCP connections while providing enhanced security controls and cross-platform compatibility, enabling sophisticated LLM-powered applications in previously inaccessible environments.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 14 of its 21 references that are in the map. First posted on arXiv 11 Apr 2025.
Builds on
14 of 21 references.
References · 14
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2025DAPO: An Open-Source LLM Reinforcement Learning System at Scalecited by 2,810
- 2025Understanding R1-Zero-Like Training: A Critical Perspectivecited by 1,345
- 2023Gorilla: Large Language Model Connected with Massive APIscited by 1,332
- 2023HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Facecited by 1,190
- 2023Visual ChatGPT: Talking, Drawing and Editing with Visual Foundation Modelscited by 668
- 2023Augmented Language Models: a Surveycited by 403
- 2023Chameleon: Plug-and-Play Compositional Reasoning with Large Language Modelscited by 356
- 2023Tool Learning with Foundation Modelscited by 302
2 more
Built on by
Citing papers per year: 2025: 6; 2026: 2.
8 papers.
- 2025A Survey of Context Engineering for Large Language Modelscited by 126
- 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflowscited by 58
- 2025AgentBound: Securing Execution Boundaries of AI Agentscited by 23
- 2025Agentic Services Computingcited by 6
- 2025ToolRegistry: A Protocol-Agnostic Tool Management Library for Function-Calling LLMscited by 5
- 2026Red Skills or Blue Skills? A Dive Into Skills Published on ClawHubcited by 5
- 2025HuggingR4: A Progressive Reasoning Framework for Discovering Optimal Model Companionscited by 0
- 2026DADL: A Declarative Description Language for Enterprise Tool Libraries in LLM Agent Systemscited by 0
- 2026DADL: A Declarative Description Language for Enterprise Tool Libraries in LLM Agent Systems4 May 2026
- 2026Red Skills or Blue Skills? A Dive Into Skills Published on ClawHub19 Mar 2026
- 2025HuggingR4: A Progressive Reasoning Framework for Discovering Optimal Model Companions24 Nov 2025
- 2025AgentBound: Securing Execution Boundaries of AI Agents24 Oct 2025
- 2025Agentic Services Computing29 Sep 2025
- 2025A Survey of Context Engineering for Large Language Models17 Jul 2025
- 2025ToolRegistry: A Protocol-Agnostic Tool Management Library for Function-Calling LLMs11 Jul 2025
- 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows29 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2025From REST to MCP: An Empirical Study of API Wrapping and Automated Server Generation for LLM Agents
- 2026Enhancing Model Context Protocol (MCP) with Context-Aware Server Collaboration
- 2025A Measurement Study of Model Context Protocol Ecosystem
- 2025MCP-Flow: Facilitating LLM Agents to Master Real-World, Diverse and Scaling MCP Tools
- 2025ScaleMCP: Dynamic and Auto-Synchronizing Model Context Protocol Tools for LLM Agents
- 2025MCP-SafetyBench: A Benchmark for Safety Evaluation of Large Language Models with Real-World MCP Servers
- 2025LiveMCPBench: Can Agents Navigate an Ocean of MCP Tools?
- 2026Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability