MCPWall

Transparent stdio proxy that blocks dangerous tool calls, scans for secret leakage, and logs all JSON-RPC messages using YAML-defined policies.

Sits between AI coding tools and downstream servers as a transparent stdio proxy, intercepting every JSON-RPC message and enforcing YAML-defined security policies. Blocks sensitive file access, dangerous shell commands, and secret leakage using deterministic regex rules with no cloud dependencies. Supports inbound request filtering, outbound response scanning with secret redaction, and provides configurable security profiles from sensible defaults to deny-by-default whitelist mode.