diff --git a/README.md b/README.md
index 5c469b2..6927576 100644
--- a/README.md
+++ b/README.md
@@ -37,6 +37,8 @@ That's it! Your HTTP endpoint is now available at `https://{your-domain}/mcp`.
 - stdio (when a command is specified): MCP endpoint is https://{your-domain}/mcp.
 - SSE/HTTP (when a URL is specified): MCP endpoint uses the backend’s original path (no conversion).
 
+> Don't want the proxy to manage TLS? Add `--no-auto-tls` so you can terminate TLS elsewhere or keep the backend on plain HTTP.
+
 ## Why not MCP Gateway?
 
 mcp-auth-proxy: **A lightweight proxy that adds authentication to any MCP server** (optional stdio→HTTP(S) conversion)