Bastion MCP server
io.github.Gowthaman90/mcp-bastion·v1.5.0·7 starsReliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
7 stars590 downloads/wk
Reviews
Write oneNobody has reviewed Bastion yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Bastion tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-07 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Bastion compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 917 Security servers
- GitHub stars
- 7
- more than 87% of 589 Security servers
- Downloads a week
- 590
- more than 93% of 386 Security servers with a package
Release history: 8 versions in the registry since 2026-07-16, latest 2026-11-04, typically one every 4 days.
Install Bastion in Claude Code, Cursor or VS Code
Runs npx -y mcp-bastion on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-bastion -- npx -y mcp-bastion
What the publisher says
From the Bastion repository's README, as published. We do not edit it. Read it on GitHub
🛡️ mcp-bastion
A reliability & security proxy for the Model Context Protocol (MCP).
Self-healing connections, runtime tool-security, and a compliance-mapped audit trail for your MCP servers.
-2ea44f>)
mcp-bastion sits between your MCP client (Claude Code, Cursor, Cline, Windsurf, Zed, Claude Desktop, or any MCP-compliant agent) and your MCP servers. It is client-agnostic — it works with any compliant client through configuration alone, with zero client-specific code — and non-invasive: your servers run unchanged, and removing Bastion is a one-line config revert.
📦 Package: mcp-bastion on npm · 🗂️ Official MCP Registry: io.github.Gowthaman90/mcp-bastion
🔒 Security, measured: on the open, vendor-neutral mcp-defense-bench, Bastion covers 63% of the MCP attack surface (15.0/24 vectors; 11 enforced) at zero false positives — the broadest of the proxies measured.
📖 Launch story: Medium · dev.to
👤 Created & maintained by Gowthaman Arumugam — Independent Researcher. Companion benchmark: mcp-defense-bench.
Contents
- Why
- How it works
- Features
- Quick start
- Demo
- Control tools
- Configuration
- Transports
- Runtime security
- Audit & compliance
- Client setup
- Architecture
Why
When an MCP server disconnects mid-session, the agent only sees a generic "No such tool available" error — indistinguishable from a tool that never existed — and it cannot reconnect; only a human can. Long agent sessions silently lose capabilities and fail in confusing ways.
Bastion closes that gap. It health-checks every server, auto-reconnects with backoff, and — crucially — exposes control tools so the agent itself can inspect connection health and recover a dropped server without human intervention.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Bastion: common questions
- Is Bastion MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Bastion safety report
- How do I install Bastion?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Bastion need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Bastion maintained?
- The last commit was 11 days ago (2026-11-04). The latest release is v1.5.0.
- What can I use instead of Bastion?
- Servers from other publishers that do the same job: Mastyf AI MCP server, Wireshark MCP server and MCPProxy MCP server. Compare all Bastion alternatives.
- How does Bastion compare with other Security MCP servers?
- safety score 92/100 (higher than 95% of 917 Security servers); github stars 7 (more than 87% of 589 Security servers); downloads a week 590 (more than 93% of 386 Security servers with a package). Full comparison.
Alternatives to Bastion
Same job from other publishers: the closest match first, then the best rated.
- Mastyf AIRuntime proxy for MCP security, cost governance & auditnot reviewedGrowingB
- WiresharkProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.not reviewedEstablishedA
- MCPProxyLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savingsnot reviewedGrowingB
- GuardvibeDeterministic security layer your AI can't be. 670 rules, 39 tools, CLI + doctor + host audit.not reviewedGrowingC
- MCP Safety WardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.not reviewedGrowingA
