bluerock
Active·★ 30·Apache-2.0·Updated 2026-05-26
★ Trending★ Memory & Context★ Security & Safety
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache 2.0
BlueRock is a lightweight runtime security sensor for Python MCP servers. It monitors MCP tool calls, resource access, session lifecycle, and module imports with zero code changes, emitting structured NDJSON events for every operation.
#agent-security#agents#ai-agents#ai-security#appsec#code-execution#fastmcp#llm-security
01
Features
01Zero code changes required
02Two-layer hooking: sys.meta_path for imports and wrapt for MCP
03Full MCP coverage: tool calls, resources, sessions, transports
04Hooks activate before your code runs
05Open source under Apache 2.0
02
Compatibility
Linux x86_64
Linux x86_64 (manylinux_2_28)
Verified via docs
Linux aarch64
Linux aarch64 (manylinux_2_28)
Verified via docs
macOS arm64
macOS Apple Silicon (macosx_11_0)
Verified via docs
macOS x86_64
macOS Intel (macosx_10_12)
Verified via docs
03
Quick start
1
$ pip install bluerock[oss]
04
Use cases
↳Security teams monitoring MCP agents in production
↳AppSec engineers auditing tool calls and data flows
↳AI developers understanding runtime behavior of MCP servers
05
Alternatives
awesome-n8n-templates★ 22.6k
Supercharge your workflow automation with this curated collection of n8n templates! Instantly connect your favorite apps-like Gmail, Telegram, Google Drive, Slack, and more-with ready-to-use, AI-powered automations. Save time, boost productivity, and unlock the true potential of n8n in just a few clicks.
FastMCP★ 25.4k
The fast, Pythonic way to build MCP servers and clients. Designed by the Pydantic team for type safety and speed.
agents-best-practices★ 1.1k
Provider-neutral Agent Skill for Codex, Claude Code, and agentic harness design.
Related searches
Comments
Log in to leave a comment
- SSam ZhangApr 21, 2026
Runtime visibility into MCP server behavior is exactly what's needed for debugging.
- BBlake HarrisApr 8, 2026
Tool call capture and session lifecycle tracking surfaces issues that logs alone miss.
- JJordan HarrisApr 6, 2026
Low overhead, doesn't impact the server performance being observed.
- SSam NguyenMar 4, 2026
Good for MCP server developers who need to understand real usage patterns.