mcpbeat Sign in

mcp-airlock MCP Server

by shalimov04 Your server? Claim it
local only

mcp-airlock runs on your own machine — the client starts it, so there is no endpoint to ping. 137 installs a week from pypi. Last commit 20 Oct 2026.

Governance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit

Installs per day peak 313 · avg 52 · -31% w/w
a month agotoday
137
Installs / week
pypi · mcp-airlock
15
Stars
3 open issues
20 Oct 2026
Last commit
from GitHub
MIT
License
Python

What the code does

We read the source, 6 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command demo.py:63
    up = subprocess.Popen([sys.executable, "-m", "tests.fake_upstream"], env=env)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add mcp-airlock -- uvx mcp-airlock
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-airlock": {
      "command": "uvx",
      "args": [
        "mcp-airlock"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-airlock]
command = "uvx"
args = ["mcp-airlock"]
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-airlock": {
      "command": "uvx",
      "args": [
        "mcp-airlock"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-airlock": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "mcp-airlock"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: AIRLOCK_JWT_SECRET (HS256 secret for verifying bearer tokens (or set AIRLOCK_JWKS_URL for OIDC)), AIRLOCK_SECRET (Key for signing confirmation tokens; set it when running more than one replica).

Alternatives to mcp-airlock

same job, measured the same way
Sidclaw Governance MCP
by vladuzh

Governance proxy for MCP servers — policy evaluation, human approval, audit trails.

67 installs/wk local only
Mastyf AI
by mastyf-ai

Runtime proxy for MCP security, cost governance & audit

52 installs/wk local only
SMTP
by ni-c

MCP server that sends mail over SMTP, gated behind an allowlist and a human confirmation

74 installs/wk local only
MCP Blast-Radius Auditor
by aos-standard

Static blast-radius audit for MCP servers before agent install. Manifest optional.

95 installs/wk local only
Scrawly MCP Server
by iliassami

MCP server for the Scrawly SEO crawler: query local audits and propose confirmation-gated fixes.

67 installs/wk local only
Aiglare
by nugehs

Audit AI/LLM features for governance guardrails: confidence, fallback, validation, human-in-loop.

65 installs/wk local only
Vtai Agent
by velsrocky

System-automation agent MCP server for opencode/claude/pi: guarded shell, dry-run-first, audited.

173 installs/wk local only
Inkog
by inkog-io

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

127 installs/wk local only

mcp-airlock — questions

Answers built from our own checks of this server.

Why is there no uptime for mcp-airlock?
mcp-airlock runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package mcp-airlock was installed 137 times last week.
How do I connect mcp-airlock?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls mcp-airlock straight from pypi; nothing to host, nothing to sign up for.
How many people use mcp-airlock?
The pypi package mcp-airlock was installed 137 times in the last week. Week over week that is -31%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is mcp-airlock open source?
Yes — it is published under the MIT licence, written in Python, 15 stars on GitHub and 3 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.