Is bluerock open source?

Yes, licensed under Apache-2.0.

AgentIndex

Tools MCP ServersHOT Categories Trending New Best Lists Compare Guides

Submit Tool

Tools MCP ServersHOT Categories Trending New Best Lists Compare

Home/

Security & Safety/

bluerock

Active·★ 35·Apache-2.0·Updated 2026-10-20

BlueRock is a lightweight runtime security sensor for Python MCP servers. It monitors MCP tool calls, resource access, session lifecycle, and module imports with zero code changes, emitting structured NDJSON events for every operation.

#agent-security#agents#ai-agents#ai-security#appsec#code-execution#fastmcp#llm-security

Best by use case About Contact Advertise Privacy Policy Terms of Use QYS GitHub Buy me a coffee ☕

Browse by Category

MCP Servers Code Assistant Workflow Automation RAG / Knowledge Base Multi-Agent Browser Automation LLM Infra Dev Tooling Observability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides

$ Install

$ pip install bluerock[oss]

↗ Visit site ★ GitHub

Features

01Zero code changes required

02Two-layer hooking: sys.meta_path for imports and wrapt for MCP

03Full MCP coverage: tool calls, resources, sessions, transports

04Hooks activate before your code runs

05Open source under Apache 2.0

Compatibility

Linux x86_64

Linux x86_64 (manylinux_2_28)

Verified via docs

Linux aarch64

Linux aarch64 (manylinux_2_28)

Verified via docs

macOS arm64

macOS Apple Silicon (macosx_11_0)

Verified via docs

macOS x86_64

macOS Intel (macosx_10_12)

Verified via docs

Quick start

$ pip install bluerock[oss]

Use cases

↳Security teams monitoring MCP agents in production

↳AppSec engineers auditing tool calls and data flows

↳AI developers understanding runtime behavior of MCP servers

Alternatives

⚡Top VS:

VSred-team-blue-team-agent-fabric★32→VSnobulex★40→VSagent-bom★35→

Comments

No comments yet. Be the first!

On this page

01Features 02Compatibility 03Quick start 04Use cases 05Alternatives

Sentinelgate

★25

→

red-team-blue-team-agent-fabric★ 32

466 security tests for AI agent systems — MCP, A2A, x402/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, 5 DOIs. v4.3.0

VSCompare→

nobulex★ 40

The trust economy for autonomous AI agents. Credit scores for machines. Agents earn Trust Capital through verified behavior, gating what they are allowed to do. Autonomy earned, not granted.

VSCompare→

agent-bom★ 35

Open security scanner for AI supply chain: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

VSCompare→

Sentinelgate★ 25

Access control for AI agents. MCP proxy + Policy Decision Point. CEL policies, RBAC, full audit trail. Any container, any sandbox.

VSCompare→

SchemaPin★ 16

The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.

VSCompare→

attestix★ 846

Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable Credentials, EU AI Act compliance layer, delegation chains, and reputation scoring. 47 MCP tools across 9 modules.

VSCompare→

node9-proxy★ 219

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

VSCompare→

nothumanallowed★ 102

Epistemic dataset generation engine. 38 AI agents deliberate through multi-round Geth Consensus — producing auditable reasoning traces for AI training. Parliament System, Knowledge Grounding, zero-trust security.

VSCompare→

See all alternatives →

bluerock-io /

bluerock

↗

Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache 2.0

35Apache-2.0

Last commit3d ago

StatusActive

CategorySecurity & Safety

Links

Documentation↗Discussion↗Issues↗Releases↗

Cloud Infrastructure

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit