Iron Proxy is a programmable egress proxy designed for securing and monitoring outbound traffic from untrusted workloads. It functions as a Man-in-the-Middle (MITM) proxy with built-in DNS interception, capable of inspecting and transforming HTTP/HTTPS, TCP tunnels, and PostgreSQL traffic. The system features a pluggable transform pipeline for access control, secret injection, authentication (AWS/GCP/OAuth), LLM-based policy enforcement, and Model Context Protocol (MCP) filtering. Architecture includes modular components for proxy handling, DNS server, transform pipeline, configuration management, and optional control plane synchronization. Deployment options range from standalone mode to managed mode via control plane, with support for Docker, Helm, and nftables enforcement. Key capabilities include structured JSON audit logging, OpenTelemetry integration, TLS MITM with dynamic certificate generation, and secret resolution from multiple backends (environment, AWS, 1Password).