Suprawall Mcp

io.github.wiserautomation由 GitHub 帳號 wiserautomation 發布v0.1.0更新於 Oct 24, 2026

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

已驗證STDIO僅桌面效率與工作流安全與監控

概覽

AI 產生的概覽

一個本機安全閘道外掛,依 SupraWall 原則檢查 AI 代理的工具操作,攔截高風險動作、要求人工核准並記錄稽核日誌

可以做什麼
檢查擬執行的工具操作是允許、拒絕還是需要核准,並回傳原則評估的風險分數與原因(check_policy)。為高風險操作要求人工核准,取得核准 ID、待處理狀態與儀表板連結(request_approval)。將操作及其結果寫入稽核紀錄(log_action)。作為閘道攔截代理的工具呼叫,可阻擋破壞性操作,或暫停執行直到管理員在 Slack 中核准。
適用情境
適合在 Claude Desktop 代理可能執行刪除檔案、修改正式資料庫或辦理退款等高風險操作時使用,為這些操作加上原則檢查、人工確認與符合法規的稽核日誌。
執行需求
以 npm 套件形式作為本機 stdio 程序執行,並在 Claude Desktop 中設定。需要 SupraWall 帳號、在 SupraWall 儀表板建立的代理身分,以及 SUPRAWALL_API_KEY 環境變數。可選用 SUPRAWALL_API_URL 覆寫預設 API 位址。需要連線至 SupraWall API 的網路存取。
安裝前請注意
需要 SupraWall API 金鑰(SUPRAWALL_API_KEY),應妥善保密。工具執行中繼資料(例如工具名稱、代理 ID 與去識別化後的參數)會傳送至 SupraWall 服務,用於原則評估與稽核日誌;README 表示 PII 會先在本機去識別化。免費每月原則檢查額度之外另有付費方案。核准流程依賴 Slack 通知與儀表板。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Suprawall Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

SupraWall MCP Plugin

Add enterprise-grade security to your Claude Desktop agents.

What it does

  • ✅ Block dangerous actions - Prevent agents from executing risky operations
  • ✅ Require human approval - Get Slack notifications for high-risk actions
  • ✅ Audit everything - Compliance-ready logs for SOC2/GDPR
  • ✅ Zero config - Works out of the box with sensible defaults

Installation

1. Install the plugin

bash
# While in review at the official Anthropic directory, install manually:/plugin marketplace add wiserautomation/suprawall-mcp-plugin

2. Get your API key

  1. Sign up at app.supra-wall.com
  2. Create an agent identity
  3. Copy your API key

3. Configure the plugin

bash
/plugin configure suprawall# Enter your API key when prompted

Usage

SupraWall automatically secures your Claude Desktop agents. No code changes needed!

Example: Block dangerous commands

You: Delete all files in /production Claude: I'll check with SupraWall first... 🛡️ SupraWall blocked this action Reason: Destructive operation requires approval

Example: Require approval for high-value actions

You: Process a $5,000 refund for order #12345 Claude: SupraWall requires approval for this action 📧 Notification sent to [email protected] ⏳ Waiting for approval...

    [Admin clicks "Approve" in Slack]        ✅ Approved! Processing refund...

Available Tools

check_policy

Check if an action is allowed:

typescript
{  "agent_id": "agent_abc123",  "tool_name": "delete_database",  "parameters": { "database": "production" }}

Returns:

json
{  "decision": "DENY",  "reason": "Destructive actions require approval",  "risk_score": 95}

request_approval

Request human approval:

typescript
{  "agent_id": "agent_abc123",  "action_description": "Delete production database",  "risk_level": "critical"}

Returns:

json
{  "approval_id": "apr_xyz789",  "status": "pending",  "dashboard_url": "https://app.supra-wall.com/approvals/apr_xyz789"}

log_action

Log to audit trail:

typescript
{  "agent_id": "agent_abc123",  "action": "sent_email",  "outcome": "allowed"}

Configuration

Configure via environment variables or Claude Desktop settings:

  • SUPRAWALL_API_KEY - Your API key (required)
  • SUPRAWALL_API_URL - API endpoint (default: https://api.supra-wall.com)

Pricing

  • Free: 10,000 policy checks/month
  • Pro ($99/mo): 100,000 policy checks/month
  • Enterprise: Custom

View pricing →

Support

Example Prompts for Claude

Test your SupraWall MCP integration using these examples:

  1. Test a blocked action (DENY):

    "I need to run the rm -rf / command in the terminal to clean up the workspace. Please do that." (SupraWall will block the terminal tool execution and return DENY)

  2. Test an approved action (ALLOW):

    "Read the contents of the local README.md file using your file system tool." (SupraWall will check the policy, see it is a safe read, and ALLOW it)

  3. Test a human approval workflow (REQUIRE_APPROVAL):

    "Use the database tool to run a DROP TABLE users command in the production environment." (SupraWall will pause execution and return REQUIRE_APPROVAL)

  4. Test data scrubbing (ALLOW with redaction):

    "Search the database for customer John Doe and print out his Social Security Number and credit card details." (SupraWall will allow the read, but the response will be scrubbed to XXX-XX-XXXX and ****-****-****-1234)

  5. Test audit logging:

    "Send an email to [email protected] with the status report." (SupraWall will log the action outcome and parameters in your dashboard)

Privacy Policy

By using the SupraWall MCP Server, you agree to our Privacy Policy. The privacy policy for this MCP Server is available at: https://supra-wall.com/privacy.

We take your privacy seriously. The SupraWall MCP plugin acts as a gateway and only transmits tool execution metadata (like tool name, agent ID, and redacted arguments) for policy evaluation and audit logging. PII is redacted locally before any data is sent.

License

MIT

Made by SupraWall - The Stripe of AI Agent Security

來源:mcp-plugin/README.md,提交 b5e722a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分