Suprawall Mcp

io.github.wiserautomation由 GitHub 账号 wiserautomation 发布v0.1.0更新于 Oct 24, 2026

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

已验证STDIO仅桌面效率与工作流安全与监控

概览

AI 生成的概览

一个本地安全网关插件,按 SupraWall 策略检查 AI 代理的工具操作,拦截高风险动作、请求人工审批并记录审计日志

可以做什么
检查拟执行的工具操作是被允许、拒绝还是需要审批,并返回策略评估给出的风险评分和原因(check_policy)。为高风险操作请求人工审批,获得审批 ID、待处理状态和仪表盘链接(request_approval)。把操作及其结果写入审计记录(log_action)。作为网关拦截代理的工具调用,可阻止破坏性操作,或暂停执行直到管理员在 Slack 中批准。
适用场景
适合在 Claude Desktop 代理可能执行删除文件、修改生产数据库或发起退款等高风险操作时使用,为这些操作加上策略检查、人工确认和面向合规的审计日志。
运行要求
以 npm 包形式作为本地 stdio 进程运行,并在 Claude Desktop 中配置。需要 SupraWall 账户、在 SupraWall 仪表盘中创建的代理身份,以及 SUPRAWALL_API_KEY 环境变量。可选 SUPRAWALL_API_URL 覆盖默认 API 地址。需要访问 SupraWall API 的网络连接。
安装前请注意
需要 SupraWall API 密钥(SUPRAWALL_API_KEY),应妥善保密。工具执行元数据(如工具名称、代理 ID 和脱敏后的参数)会发送到 SupraWall 服务用于策略评估和审计日志;README 称 PII 会先在本地脱敏。免费月度策略检查额度之外有付费套餐。审批流程依赖 Slack 通知和仪表盘。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Suprawall Mcp,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

SupraWall MCP Plugin

Add enterprise-grade security to your Claude Desktop agents.

What it does

  • ✅ Block dangerous actions - Prevent agents from executing risky operations
  • ✅ Require human approval - Get Slack notifications for high-risk actions
  • ✅ Audit everything - Compliance-ready logs for SOC2/GDPR
  • ✅ Zero config - Works out of the box with sensible defaults

Installation

1. Install the plugin

bash
# While in review at the official Anthropic directory, install manually:/plugin marketplace add wiserautomation/suprawall-mcp-plugin

2. Get your API key

  1. Sign up at app.supra-wall.com
  2. Create an agent identity
  3. Copy your API key

3. Configure the plugin

bash
/plugin configure suprawall# Enter your API key when prompted

Usage

SupraWall automatically secures your Claude Desktop agents. No code changes needed!

Example: Block dangerous commands

You: Delete all files in /production Claude: I'll check with SupraWall first... 🛡️ SupraWall blocked this action Reason: Destructive operation requires approval

Example: Require approval for high-value actions

You: Process a $5,000 refund for order #12345 Claude: SupraWall requires approval for this action 📧 Notification sent to [email protected] ⏳ Waiting for approval...

    [Admin clicks "Approve" in Slack]        ✅ Approved! Processing refund...

Available Tools

check_policy

Check if an action is allowed:

typescript
{  "agent_id": "agent_abc123",  "tool_name": "delete_database",  "parameters": { "database": "production" }}

Returns:

json
{  "decision": "DENY",  "reason": "Destructive actions require approval",  "risk_score": 95}

request_approval

Request human approval:

typescript
{  "agent_id": "agent_abc123",  "action_description": "Delete production database",  "risk_level": "critical"}

Returns:

json
{  "approval_id": "apr_xyz789",  "status": "pending",  "dashboard_url": "https://app.supra-wall.com/approvals/apr_xyz789"}

log_action

Log to audit trail:

typescript
{  "agent_id": "agent_abc123",  "action": "sent_email",  "outcome": "allowed"}

Configuration

Configure via environment variables or Claude Desktop settings:

  • SUPRAWALL_API_KEY - Your API key (required)
  • SUPRAWALL_API_URL - API endpoint (default: https://api.supra-wall.com)

Pricing

  • Free: 10,000 policy checks/month
  • Pro ($99/mo): 100,000 policy checks/month
  • Enterprise: Custom

View pricing →

Support

Example Prompts for Claude

Test your SupraWall MCP integration using these examples:

  1. Test a blocked action (DENY):

    "I need to run the rm -rf / command in the terminal to clean up the workspace. Please do that." (SupraWall will block the terminal tool execution and return DENY)

  2. Test an approved action (ALLOW):

    "Read the contents of the local README.md file using your file system tool." (SupraWall will check the policy, see it is a safe read, and ALLOW it)

  3. Test a human approval workflow (REQUIRE_APPROVAL):

    "Use the database tool to run a DROP TABLE users command in the production environment." (SupraWall will pause execution and return REQUIRE_APPROVAL)

  4. Test data scrubbing (ALLOW with redaction):

    "Search the database for customer John Doe and print out his Social Security Number and credit card details." (SupraWall will allow the read, but the response will be scrubbed to XXX-XX-XXXX and ****-****-****-1234)

  5. Test audit logging:

    "Send an email to [email protected] with the status report." (SupraWall will log the action outcome and parameters in your dashboard)

Privacy Policy

By using the SupraWall MCP Server, you agree to our Privacy Policy. The privacy policy for this MCP Server is available at: https://supra-wall.com/privacy.

We take your privacy seriously. The SupraWall MCP plugin acts as a gateway and only transmits tool execution metadata (like tool name, agent ID, and redacted arguments) for policy evaluation and audit logging. PII is redacted locally before any data is sent.

License

MIT

Made by SupraWall - The Stripe of AI Agent Security

来源:mcp-plugin/README.md,提交 b5e722a

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.1.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分