Bulwark MCP Server

AI agent governance: content scanning, audit logs, policy evaluation, session management.

What the server does

Bulwark sits between AI agents and external tools, enforcing policies, managing credentials, inspecting content, and maintaining a complete audit trail. One policy governs all your agents — Claude Code, OpenClaw, Codex, or any MCP/HTTP client.

• Policy enforcement — — YAML-based rules control which tools agents can use, with glob patterns, scope-based precedence, and hot-reload
• Credential management — — Agents never see real secrets. Bulwark injects credentials at the last mile, encrypted at rest with age
• Content inspection — — Scan requests and responses for secrets, PII, and prompt injection. Block or redact automatically
• Audit logging — — Every action recorded in a tamper-evident SQLite database with blake3 hash chains
• Rate limiting — — Token-bucket rate limits per session, operator, tool, or globally. Cost tracking with budget enforcement
• MCP-native — — Works as an MCP gateway or HTTP forward proxy. Governance metadata on every tool call response

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.