bastiongate

gate

Runtime MCP security gateway

MCP security gateway: an inline proxy that scans tools/list for poisoned tools, enforces allow/deny, blocks injected results, and logs every call.

pip install bastiongateway

The PyPI package is bastiongateway; the import package and CLI are bastiongate.

What it does

Sits inline between agent and MCP servers (stdio + HTTP/SSE)
Drops poisoned tools, enforces allow/deny, blocks injected results, redacts PII in arguments
JSONL forensic log; consumes the policy bastionsupply harden emits
Optional deep inspection via agentbastion (heuristics / semantic / LLM-judge)

bastiongate run --policy policy.yaml -- my-mcp-server

Version 0.7.0 · MIT