Suprawall Mcp

io.github.wiserautomationPublished by GitHub account wiserautomationv0.1.0Updated Oct 24, 2026

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

Overview

AI-generated overview

A local security gateway plugin that checks AI agent tool actions against SupraWall policies, blocks risky ones, requests human approval and logs an audit trail

What you can do
Check whether a proposed tool action is allowed, denied or needs approval, with a risk score and reason returned by policy evaluation (check_policy). Request human approval for high-risk actions and receive an approval ID, pending status and dashboard link (request_approval). Record actions and their outcomes in an audit trail (log_action). Act as a gateway that intercepts agent tool calls and can block destructive operations or pause them until an admin approves in Slack.
When to use it
Useful when running Claude Desktop agents that can execute risky operations such as deleting files, changing production databases or issuing refunds, and you want policy checks, human sign-off and compliance-oriented audit logs around those actions.
Requirements
Runs as a local stdio process installed as an npm package and configured in Claude Desktop. Requires a SupraWall account, an agent identity created in the SupraWall dashboard, and the SUPRAWALL_API_KEY environment variable. Optionally SUPRAWALL_API_URL to override the default API endpoint. Network access to the SupraWall API is needed.
Before you install
Requires a SupraWall API key (SUPRAWALL_API_KEY) that should be kept secret. Tool execution metadata, including tool name, agent ID and redacted arguments, is sent to the SupraWall service for policy evaluation and audit logging; the README states PII is redacted locally first. Paid tiers exist beyond the free monthly policy-check quota. Approval workflows depend on Slack notifications and a dashboard.

Installation

In SourceWeft

  1. Open Suprawall Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

SupraWall MCP Plugin

Add enterprise-grade security to your Claude Desktop agents.

What it does

  • ✅ Block dangerous actions - Prevent agents from executing risky operations
  • ✅ Require human approval - Get Slack notifications for high-risk actions
  • ✅ Audit everything - Compliance-ready logs for SOC2/GDPR
  • ✅ Zero config - Works out of the box with sensible defaults

Installation

1. Install the plugin

bash
# While in review at the official Anthropic directory, install manually:/plugin marketplace add wiserautomation/suprawall-mcp-plugin

2. Get your API key

  1. Sign up at app.supra-wall.com
  2. Create an agent identity
  3. Copy your API key

3. Configure the plugin

bash
/plugin configure suprawall# Enter your API key when prompted

Usage

SupraWall automatically secures your Claude Desktop agents. No code changes needed!

Example: Block dangerous commands

You: Delete all files in /production Claude: I'll check with SupraWall first... 🛡️ SupraWall blocked this action Reason: Destructive operation requires approval

Example: Require approval for high-value actions

You: Process a $5,000 refund for order #12345 Claude: SupraWall requires approval for this action 📧 Notification sent to [email protected] ⏳ Waiting for approval...

    [Admin clicks "Approve" in Slack]        ✅ Approved! Processing refund...

Available Tools

check_policy

Check if an action is allowed:

typescript
{  "agent_id": "agent_abc123",  "tool_name": "delete_database",  "parameters": { "database": "production" }}

Returns:

json
{  "decision": "DENY",  "reason": "Destructive actions require approval",  "risk_score": 95}

request_approval

Request human approval:

typescript
{  "agent_id": "agent_abc123",  "action_description": "Delete production database",  "risk_level": "critical"}

Returns:

json
{  "approval_id": "apr_xyz789",  "status": "pending",  "dashboard_url": "https://app.supra-wall.com/approvals/apr_xyz789"}

log_action

Log to audit trail:

typescript
{  "agent_id": "agent_abc123",  "action": "sent_email",  "outcome": "allowed"}

Configuration

Configure via environment variables or Claude Desktop settings:

  • SUPRAWALL_API_KEY - Your API key (required)
  • SUPRAWALL_API_URL - API endpoint (default: https://api.supra-wall.com)

Pricing

  • Free: 10,000 policy checks/month
  • Pro ($99/mo): 100,000 policy checks/month
  • Enterprise: Custom

View pricing →

Support

Example Prompts for Claude

Test your SupraWall MCP integration using these examples:

  1. Test a blocked action (DENY):

    "I need to run the rm -rf / command in the terminal to clean up the workspace. Please do that." (SupraWall will block the terminal tool execution and return DENY)

  2. Test an approved action (ALLOW):

    "Read the contents of the local README.md file using your file system tool." (SupraWall will check the policy, see it is a safe read, and ALLOW it)

  3. Test a human approval workflow (REQUIRE_APPROVAL):

    "Use the database tool to run a DROP TABLE users command in the production environment." (SupraWall will pause execution and return REQUIRE_APPROVAL)

  4. Test data scrubbing (ALLOW with redaction):

    "Search the database for customer John Doe and print out his Social Security Number and credit card details." (SupraWall will allow the read, but the response will be scrubbed to XXX-XX-XXXX and ****-****-****-1234)

  5. Test audit logging:

    "Send an email to [email protected] with the status report." (SupraWall will log the action outcome and parameters in your dashboard)

Privacy Policy

By using the SupraWall MCP Server, you agree to our Privacy Policy. The privacy policy for this MCP Server is available at: https://supra-wall.com/privacy.

We take your privacy seriously. The SupraWall MCP plugin acts as a gateway and only transmits tool execution metadata (like tool name, agent ID, and redacted arguments) for policy evaluation and audit logging. PII is redacted locally before any data is sent.

License

MIT

Made by SupraWall - The Stripe of AI Agent Security

Source: mcp-plugin/README.md at commit b5e722a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts