mcpbeat Sign in

MCP Sentinel MCP Server

local only

MCP Sentinel runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 22 Jul 2026.

Zero-trust MCP security proxy with policy enforcement, PII scrubbing, approvals, and audit trails.

Installs / week
npm · @oaslananka/sentinel
2
Stars
2 open issues
22 Jul 2026
Last commit
0 releases in 90 days
Apache-2.0
License
TypeScript

What the code does

We read the source, 2 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add sentinel -- npx -y @oaslananka/sentinel
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "sentinel": {
      "args": [
        "-y",
        "@oaslananka/sentinel"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.sentinel]
command = "npx"
args = ["-y", "@oaslananka/sentinel"]
.cursor/mcp.json
{
  "mcpServers": {
    "sentinel": {
      "args": [
        "-y",
        "@oaslananka/sentinel"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "sentinel": {
      "args": [
        "-y",
        "@oaslananka/sentinel"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: SENTINEL_DB_PATH (SQLite database path used for audit and key storage.), SENTINEL_UPSTREAM_URL (HTTP upstream MCP endpoint.), SENTINEL_UPSTREAM_COMMAND (stdio upstream MCP launch command.). The author declared them in the registry entry; get the values from the project itself.

Alternatives to MCP Sentinel

same job, measured the same way
Cordon for MCP
by marras0914

Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

44 installs/wk local only
MCPower Security Proxy
by ai-mcpower

Security proxy that wraps MCP servers with real-time monitoring and policy enforcement

301 installs/wk local only
MCPower Security Proxy
by mcpower-security

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

local only
A
ThornGuard
by qwady-thorns

Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging.

local only
MCP Seatbelt
by kryptosai

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

112 installs/wk local only
Marketnow
by edgarfloresguerra2011-a11y

MCP marketplace with 8,845 security-audited skills. 9-layer Sentinel audit + ATC trust cards.

730 installs/wk local only
Gateway
by sealgate

MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.

answering
Allowance MCP
by useallowance

Secure agent purchasing with human-approved virtual cards, receipts, and audit trails.

answering

MCP Sentinel — questions

Answers built from our own checks of this server.

Why is there no uptime for MCP Sentinel?
MCP Sentinel runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @oaslananka/sentinel.
How do I connect MCP Sentinel?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @oaslananka/sentinel straight from npm; nothing to host, nothing to sign up for.
Is MCP Sentinel open source?
Yes — it is published under the Apache-2.0 licence, written in TypeScript, 2 stars on GitHub and 2 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.