Open Source Security Atlas

claude_proxy: An Open Source Tool for Application Security | Open Source Security Atlas

Application Security

Tool

claude_proxy

Claude Proxy seamlessly converts Claude API requests to OpenAI API format using a TypeScript proxy deployed on Cloudflare Workers.

View on GitHub

About This Tool

Deploy a TypeScript proxy on Cloudflare Workers to convert Claude API requests to OpenAI API format. Seamlessly integrate compatible clients. 🚀🐙

Primary Use Case

This tool is designed for developers who need to integrate clients that use the Claude API with services that require the OpenAI API format. It simplifies the process of making API requests compatible across different platforms.

Key Features

Dynamic Routing to any OpenAI-compatible API endpoint
Full support for Claude API's /v1/messages endpoint
Automatic conversion of Claude's tools format to OpenAI's format
Pre-configured routes for specific Haiku models
Easy setup with a configuration script
One-click deployment to Cloudflare Workers

Insights & Recommendations

Ensure you have Node.js and npm installed before running the installation commands.

Installation

Clone the Repository: git clone https://github.com/DavidLabrin/claude_proxy.git
Change Directory: cd claude_proxy
Install Dependencies: npm install
Deploy to Cloudflare Workers: npx wrangler publish

Usage

curl -X POST 'https://your-proxy-url.com/v1/messages' -H 'Content-Type: application/json' -H 'Authorization: Bearer YOUR_API_KEY' -d '{ "messages": [{"role": "user", "content": "Hello, Claude!"}] }'

Sends a message to the proxy, which routes it to the appropriate OpenAI API endpoint.

Smart Usage Notes

Repurposing: The tool can be adapted to test API security by simulating API request transformations and observing how different security layers respond to such changes.
Chaining: Combine this tool with a web application firewall (WAF) to dynamically test and adjust rulesets based on real-time API transformations and traffic patterns.
Evasion/Detection: Attackers might attempt to bypass the proxy by directly interacting with the target API. To detect such attempts, monitor for unusual traffic patterns or unauthorized access attempts.
Data Fusion: Integrate the tool's logs with SIEM systems to correlate API transformation events with broader network activity, enhancing threat detection capabilities.
Automation: Automate the deployment and configuration of the proxy using CI/CD pipelines, ensuring consistent security posture across development and production environments.