MCP-Bastion
MCP-Bastion is a zero-infrastructure runtime middleware for the Model Context Protocol that provides enterprise-grade security. It blocks prompt injection, PII leakage, and resource exhaustion through features like exfiltration canaries, secret redaction, and JSONPath argument guards. It supports audit logging, cost-aware policies, and boundary mode for mandatory proxy authentication.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
Checks and signals
Each line is separate evidence, not a trust score.
- Popularity 7 GitHub stars
What you can do with it
- Block prompt injection and PII leakage
- Redact secrets in tool outputs
- Audit MCP interactions with JSONL logs
- Enforce cost-aware policies and rate limits
Source and maintenance
- Last repository push
- Latest release
- v5.1.0
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
mcp-bastion-python 5.1.0
{
"version": "5.1.0",
"transport": "stdio",
"identifier": "mcp-bastion-python",
"registryType": "pypi"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mcp-bastion": {
"command": "uvx",
"args": [
"mcp-bastion-python==5.1.0"
]
}
}
}Cline
{
"mcpServers": {
"mcp-bastion": {
"command": "uvx",
"args": [
"mcp-bastion-python==5.1.0"
]
}
}
}VS Code
{
"servers": {
"mcp-bastion": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-bastion-python==5.1.0"
]
}
}
}Claude Desktop
{
"mcpServers": {
"mcp-bastion": {
"command": "uvx",
"args": [
"mcp-bastion-python==5.1.0"
]
}
}
}Let your agent find its tools
Find servers like MCP-Bastion from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.