MCP-Bastion MCP server
io.github.vaquarkhan/mcp-bastion·v5.1.0·7 starsSecurity middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.
7 stars298 downloads/wk
Reviews
Write oneNobody has reviewed MCP-Bastion yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
MCP-Bastion tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it
- Code scan87 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evalmcp_bastion_python-5.1.0/src/mcp_bastion/pillars/content_filter.py: …thout flagging ordinary discussion of ``eval()`` or markdown code fences. """ from _…
How MCP-Bastion compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 73% of 4,460 AI and agents servers
- GitHub stars
- 7
- more than 81% of 2,711 AI and agents servers
- Downloads a week
- 298
- more than 80% of 1,538 AI and agents servers with a package
Install MCP-Bastion in Claude Code, Cursor or VS Code
claude mcp add mcp-bastion -- uvx mcp-bastion-python
What the publisher says
From the MCP-Bastion repository's README, as published. We do not edit it. Read it on GitHub
MCP-Bastion
<!-- mcp-name: io.github.vaquarkhan/mcp-bastion -->
README · Documentation · Demos · Dashboard / Observability · Multi-language · Benchmark · License · Security
Current release: 5.1.0 · Docker v5.1.0 · 26 PyPI packages · CHANGELOG
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
MCP-Bastion: common questions
- Is MCP-Bastion MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the MCP-Bastion safety report
- How do I install MCP-Bastion?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does MCP-Bastion need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is MCP-Bastion maintained?
- The last commit was 3 days ago (2026-11-01). The latest release is v5.1.0.
- What can I use instead of MCP-Bastion?
- Servers from other publishers that do the same job: Shellward MCP server, Agent Security Scanner MCP server and HOL Guard MCP server.
- How does MCP-Bastion compare with other AI and agents MCP servers?
- safety score 85/100 (higher than 73% of 4,460 AI and agents servers); github stars 7 (more than 81% of 2,711 AI and agents servers); downloads a week 298 (more than 80% of 1,538 AI and agents servers with a package). Full comparison.
Alternatives to MCP-Bastion
Same job from other publishers: the closest match first, then the best rated.
- ShellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.not reviewedEstablishedA
- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- Agent-Native AnalyticsAgent-Native Amplitude/Mixpanel - connect data sources, prompt for chartsnot reviewedEstablishedA
- ImageAI image generation and editing with prompt optimization and quality presetsnot reviewedEstablishedB
