
Suprawall Mcp
io.github.wiserautomation由 GitHub 帳號 wiserautomation 發布v0.1.0更新於 Oct 24, 2026
SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.
概覽
一個本機安全閘道外掛,依 SupraWall 原則檢查 AI 代理的工具操作,攔截高風險動作、要求人工核准並記錄稽核日誌
- 可以做什麼
- 檢查擬執行的工具操作是允許、拒絕還是需要核准,並回傳原則評估的風險分數與原因(check_policy)。為高風險操作要求人工核准,取得核准 ID、待處理狀態與儀表板連結(request_approval)。將操作及其結果寫入稽核紀錄(log_action)。作為閘道攔截代理的工具呼叫,可阻擋破壞性操作,或暫停執行直到管理員在 Slack 中核准。
- 適用情境
- 適合在 Claude Desktop 代理可能執行刪除檔案、修改正式資料庫或辦理退款等高風險操作時使用,為這些操作加上原則檢查、人工確認與符合法規的稽核日誌。
- 執行需求
- 以 npm 套件形式作為本機 stdio 程序執行,並在 Claude Desktop 中設定。需要 SupraWall 帳號、在 SupraWall 儀表板建立的代理身分,以及 SUPRAWALL_API_KEY 環境變數。可選用 SUPRAWALL_API_URL 覆寫預設 API 位址。需要連線至 SupraWall API 的網路存取。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 Suprawall Mcp,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
SupraWall MCP Plugin
Add enterprise-grade security to your Claude Desktop agents.
What it does
- ✅ Block dangerous actions - Prevent agents from executing risky operations
- ✅ Require human approval - Get Slack notifications for high-risk actions
- ✅ Audit everything - Compliance-ready logs for SOC2/GDPR
- ✅ Zero config - Works out of the box with sensible defaults
Installation
1. Install the plugin
2. Get your API key
- Sign up at app.supra-wall.com
- Create an agent identity
- Copy your API key
3. Configure the plugin
Usage
SupraWall automatically secures your Claude Desktop agents. No code changes needed!
Example: Block dangerous commands
You: Delete all files in /production Claude: I'll check with SupraWall first... 🛡️ SupraWall blocked this action Reason: Destructive operation requires approval
Example: Require approval for high-value actions
You: Process a $5,000 refund for order #12345 Claude: SupraWall requires approval for this action 📧 Notification sent to [email protected] ⏳ Waiting for approval...
Available Tools
check_policy
Check if an action is allowed:
Returns:
request_approval
Request human approval:
Returns:
log_action
Log to audit trail:
Configuration
Configure via environment variables or Claude Desktop settings:
SUPRAWALL_API_KEY- Your API key (required)SUPRAWALL_API_URL- API endpoint (default:https://api.supra-wall.com)
Pricing
- Free: 10,000 policy checks/month
- Pro ($99/mo): 100,000 policy checks/month
- Enterprise: Custom
Support
- 📧 Email: [email protected]
- 💬 Slack: Join our community
- 📚 Docs: supra-wall.com/docs
Example Prompts for Claude
Test your SupraWall MCP integration using these examples:
-
Test a blocked action (DENY):
"I need to run the
rm -rf /command in the terminal to clean up the workspace. Please do that." (SupraWall will block the terminal tool execution and return DENY) -
Test an approved action (ALLOW):
"Read the contents of the local
README.mdfile using your file system tool." (SupraWall will check the policy, see it is a safe read, and ALLOW it) -
Test a human approval workflow (REQUIRE_APPROVAL):
"Use the database tool to run a DROP TABLE users command in the production environment." (SupraWall will pause execution and return REQUIRE_APPROVAL)
-
Test data scrubbing (ALLOW with redaction):
"Search the database for customer John Doe and print out his Social Security Number and credit card details." (SupraWall will allow the read, but the response will be scrubbed to
XXX-XX-XXXXand****-****-****-1234) -
Test audit logging:
"Send an email to [email protected] with the status report." (SupraWall will log the action outcome and parameters in your dashboard)
Privacy Policy
By using the SupraWall MCP Server, you agree to our Privacy Policy. The privacy policy for this MCP Server is available at: https://supra-wall.com/privacy.
We take your privacy seriously. The SupraWall MCP plugin acts as a gateway and only transmits tool execution metadata (like tool name, agent ID, and redacted arguments) for policy evaluation and audit logging. PII is redacted locally before any data is sent.
License
MIT
Made by SupraWall - The Stripe of AI Agent Security
來源:mcp-plugin/README.md,提交 b5e722a
工具
0版本歷史
1- v0.1.0最新Sep 16, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分