Bulwark MCP Server

Open-source governance layer for AI agents. Bulwark sits between AI agents and external tools, enforcing policies, managing credentials, inspecting content, and maintaining a complete audit trail. One policy governs all your agents - Claude Code, OpenClaw, Codex, or any MCP/HTTP client.

People who need these tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Rust.

VERIFIED ACTIVE

LAST COMMIT 2026-02-25 · ★ 4 · #828 OF 848 MAINTAINED OTHER · VERIFIED 2026-08-25

Apache-2.0 · Rust servers · how we verify → /methodology

01 · Install Bulwark

before you install - you'll need

BULWARK_SESSION

Environment variables documented in the project's README - it lists which are required and which have defaults.

Docker

docker run -i --rm ghcr.io/bpolania/bulwark:v0.2.0

Claude Desktop - add to config

{
  "mcpServers": {
    "bpolania-bulwark": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/bpolania/bulwark:v0.2.0"
      ]
    }
  }
}
Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license Apache-2.0 - declared in the repository

registry namespace io.github.bpolania is GitHub-verified and matches the repo owner

03 · What Bulwark can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.2.0 · 2026-02-25

v0.1.0 · 2026-02-16

Bulwark v0.1.0 - Governance Layer for AI Agents · Bulwark is an open-source governance proxy that sits between AI agents and the tools they call. Policy enforcement, credential injection, content inspection, rate…

04 · Who maintains Bulwark

Bulwark is maintained by bpolania. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

category
other - ranked #828 of 848 actively-maintained other servers as of 2026-08-25.
registry
io.github.bpolania/bulwark (active, first published 2026-02-25)
packages
oci:ghcr.io/bpolania/bulwark:v0.2.0

06 · Bulwark FAQ

What is Bulwark?

Open-source governance layer for AI agents. Bulwark sits between AI agents and external tools, enforcing policies, managing credentials, inspecting content, and maintaining a complete audit trail. One policy governs all your agents - Claude Code, OpenClaw, Codex, or any MCP/HTTP client.

Is Bulwark still maintained?

Yes - as of 2026-08-25, its last commit was 2026-02-25. We re-verify nightly.

How do I install Bulwark?

Run `docker run -i --rm ghcr.io/bpolania/bulwark:v0.2.0`. The README documents one environment variable (BULWARK_SESSION) to set first. You can also paste the ready-made client config above.

07 · Alternatives to Bulwark

More MCP servers to compare · Frugal · CHAP Coordinator · Agrobr · Czech PII Anonymizer & NLP · MCP Orchestrator

More Rust MCP servers · Ivygrep · Automatised Pipeline · Remembrall MCP · Evmole · Aptu Coder · see all