
Suprawall Mcp
io.github.wiserautomationPublished by GitHub account wiserautomationv0.1.0Updated Oct 24, 2026
SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.
Overview
A local security gateway plugin that checks AI agent tool actions against SupraWall policies, blocks risky ones, requests human approval and logs an audit trail
- What you can do
- Check whether a proposed tool action is allowed, denied or needs approval, with a risk score and reason returned by policy evaluation (check_policy). Request human approval for high-risk actions and receive an approval ID, pending status and dashboard link (request_approval). Record actions and their outcomes in an audit trail (log_action). Act as a gateway that intercepts agent tool calls and can block destructive operations or pause them until an admin approves in Slack.
- When to use it
- Useful when running Claude Desktop agents that can execute risky operations such as deleting files, changing production databases or issuing refunds, and you want policy checks, human sign-off and compliance-oriented audit logs around those actions.
- Requirements
- Runs as a local stdio process installed as an npm package and configured in Claude Desktop. Requires a SupraWall account, an agent identity created in the SupraWall dashboard, and the SUPRAWALL_API_KEY environment variable. Optionally SUPRAWALL_API_URL to override the default API endpoint. Network access to the SupraWall API is needed.
Installation
In SourceWeft
- Open Suprawall Mcp in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
SupraWall MCP Plugin
Add enterprise-grade security to your Claude Desktop agents.
What it does
- ✅ Block dangerous actions - Prevent agents from executing risky operations
- ✅ Require human approval - Get Slack notifications for high-risk actions
- ✅ Audit everything - Compliance-ready logs for SOC2/GDPR
- ✅ Zero config - Works out of the box with sensible defaults
Installation
1. Install the plugin
2. Get your API key
- Sign up at app.supra-wall.com
- Create an agent identity
- Copy your API key
3. Configure the plugin
Usage
SupraWall automatically secures your Claude Desktop agents. No code changes needed!
Example: Block dangerous commands
You: Delete all files in /production Claude: I'll check with SupraWall first... 🛡️ SupraWall blocked this action Reason: Destructive operation requires approval
Example: Require approval for high-value actions
You: Process a $5,000 refund for order #12345 Claude: SupraWall requires approval for this action 📧 Notification sent to [email protected] ⏳ Waiting for approval...
Available Tools
check_policy
Check if an action is allowed:
Returns:
request_approval
Request human approval:
Returns:
log_action
Log to audit trail:
Configuration
Configure via environment variables or Claude Desktop settings:
SUPRAWALL_API_KEY- Your API key (required)SUPRAWALL_API_URL- API endpoint (default:https://api.supra-wall.com)
Pricing
- Free: 10,000 policy checks/month
- Pro ($99/mo): 100,000 policy checks/month
- Enterprise: Custom
Support
- 📧 Email: [email protected]
- 💬 Slack: Join our community
- 📚 Docs: supra-wall.com/docs
Example Prompts for Claude
Test your SupraWall MCP integration using these examples:
-
Test a blocked action (DENY):
"I need to run the
rm -rf /command in the terminal to clean up the workspace. Please do that." (SupraWall will block the terminal tool execution and return DENY) -
Test an approved action (ALLOW):
"Read the contents of the local
README.mdfile using your file system tool." (SupraWall will check the policy, see it is a safe read, and ALLOW it) -
Test a human approval workflow (REQUIRE_APPROVAL):
"Use the database tool to run a DROP TABLE users command in the production environment." (SupraWall will pause execution and return REQUIRE_APPROVAL)
-
Test data scrubbing (ALLOW with redaction):
"Search the database for customer John Doe and print out his Social Security Number and credit card details." (SupraWall will allow the read, but the response will be scrubbed to
XXX-XX-XXXXand****-****-****-1234) -
Test audit logging:
"Send an email to [email protected] with the status report." (SupraWall will log the action outcome and parameters in your dashboard)
Privacy Policy
By using the SupraWall MCP Server, you agree to our Privacy Policy. The privacy policy for this MCP Server is available at: https://supra-wall.com/privacy.
We take your privacy seriously. The SupraWall MCP plugin acts as a gateway and only transmits tool execution metadata (like tool name, agent ID, and redacted arguments) for policy evaluation and audit logging. PII is redacted locally before any data is sent.
License
MIT
Made by SupraWall - The Stripe of AI Agent Security
Source: mcp-plugin/README.md at commit b5e722a
Tools
0Version history
1- v0.1.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts