Gowthaman90/mcp-bastion
Reliability & security proxy for the Model Context Protocol (MCP). Self-healing connections, runtime tool-poisoning/shadowing defense, and NIST AI RMF + OWASP LLM Top-10 audit trails for any MCP server. Works with Claude, Cursor, Cline, Windsurf.
Gowthaman90/mcp-bastion is an MCP server distributed on github, maintained by Gowthaman90, tracked here since July 2026. It has shipped 12 releases and exposes 4 tools. Tools include bastion__compliance, bastion__reconnect, bastion__security, bastion__status. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.
what we found
Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.
Since the previous scan on 2026-10-16: 1 tool removed.
full security breakdown →tools
-
bastion__complianceAudit summary of recent activity mapped to NIST AI RMF / OWASP LLM Top 10 (requires audit.enabled). -
bastion__reconnectReconnect a named server (argument: { "server": "<name>" }) without human intervention. -
bastion__securityPer-tool security report: pin status (approved vs changed), poisoning findings, and shadowing. -
bastion__statusHealth of every proxied server: connected / disconnected / reconnecting / failed, tool counts, last error.
release cadence · 90d
recent releases
| version | date | src |
|---|---|---|
| v1.2.0 | 2026-10-16 | github |
| v1.1.0 | 2026-09-30 | github |
| v1.0.3 | 2026-09-24 | github |
| v1.0.2 | 2026-09-08 | github |
| v1.0.1 | 2026-09-08 | github |
| v1.0.0 | 2026-09-08 | github |
| v0.9.0 | 2026-09-08 | github |
| v0.4.0 | 2026-07-15 | github |
| v0.3.1 | 2026-07-14 | github |
| v0.3.0 | 2026-07-13 | github |