Gowthaman90/mcp-bastion

Overview

Reliability and security proxy for the Model Context Protocol (MCP). Provides self-healing connections, runtime tool-poisoning/shadowing defense, and audit trails aligned with NIST AI RMF and OWASP LLM Top-10 for any MCP server. Works with Claude, Cursor, Cline, Windsurf.

Best for

Best for
Developers running MCP servers who need reliability and security guardrails

Use cases

• Shield MCP servers from tool-poisoning and shadowing attacks
• Maintain stable connections with self-healing for long-running agents
• Generate audit trails for compliance with NIST and OWASP frameworks

How to use

Tools exposed

• bastion__status
• bastion__reconnect
• bastion__security
• bastion__compliance

Tested with

Claude Desktop, Claude Code, Cursor, Windsurf, Cline

Notes

Reliability and security proxy for the Model Context Protocol (MCP). Provides self-healing connections, runtime tool-poisoning/shadowing defense, and audit trails aligned with NIST AI RMF and OWASP LLM Top-10 for any MCP server. Works with Claude, Cursor, Cline, Windsurf.

6 stars on GitHub. Last updated 2026-09-15. Licensed Apache-2.0.

Use cases

• Shield MCP servers from tool-poisoning and shadowing attacks
• Maintain stable connections with self-healing for long-running agents
• Generate audit trails for compliance with NIST and OWASP frameworks

Pros

• Self-healing connections reduce downtime
• Built-in defense against tool poisoning and shadowing
• Framework-aligned audit trails for security reviews

Cons

• Young project with only 6 GitHub stars
• Requires running a proxy layer between clients and servers
• Limited community adoption and documentation

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.