How do I install the mcpwall mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

SSyncDev

Start a project

Mcpwall MCP Server

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

Local serverstdio

What is the Mcpwall MCP Server?

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

What the server does

Sits between your AI coding tool (Claude Code, Cursor, Windsurf) and MCP servers, intercepting every JSON-RPC message and enforcing YAML-defined policies.

Blocks sensitive file access — — .ssh/, .env, credentials, browser data
Blocks dangerous commands — — rm -rf, pipe-to-shell, reverse shells
Scans for secret leakage — — API keys, tokens, private keys (regex + entropy)
Scans server responses — — redacts leaked secrets, blocks prompt injection patterns, flags suspicious content
Logs everything — — JSON Lines audit trail of every tool call and response
Uses zero AI — — deterministic rules, no LLM decisions, no cloud calls

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
name	block-ssh-keys
filesystem-mcp.yaml	restricts reads/writes/listings to ${PROJECT_DIR}, blocks dotfiles and traversal
github-mcp.yaml	logs all file reads, blocks broad private repo enumeration
shell-mcp.yaml	adds network command and package install blocks
regex	Regular expression test on the value
pattern	Glob pattern (uses [minimatch](https://github.com/isaacs/minimatch))
not_under	Matches if path is NOT under the given directory. Supports ${HOME}, ${PROJECT_DIR}
secrets	When true, runs the secret scanner on the value
server	Glob pattern on the server name
response_contains	Case-insensitive substring match against response text
response_contains_regex	Regex match against response text

How to install the Mcpwall MCP Server

{
  "mcpServers": {
    "MCP_DOCKER": {
      "command": "docker",
      "args": ["mcp", "gateway", "run"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Example prompts to try

“Use Mcpwall to name.”
“Use Mcpwall to filesystem-mcp.yaml.”
“Use Mcpwall to github-mcp.yaml.”

Frequently asked questions

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.