agent-bom-enforce

name	agent-bom-enforce
description	Enforce security policies on MCP tool calls and block dangerous operations at runtime. Use when: "block risky calls", "apply policy", "proxy", "runtime protection", "policy enforcement", "intercept MCP calls".
version	0.96.3
license	Apache-2.0
compatibility	Requires Python 3.11+. Install via pipx or pip. No credentials required. Policy files are user-provided YAML/JSON. Proxy runs locally.
metadata	{"author":"msaad00","homepage":"https://github.com/msaad00/agent-bom","source":"https://github.com/msaad00/agent-bom","pypi":"https://pypi.org/project/agent-bom/","scorecard":"https://securityscorecards.dev/viewer/?uri=github.com/msaad00/agent-bom","tests":7239,"install":{"pipx":"agent-bom","pip":"agent-bom","docker":"ghcr.io/msaad00/agent-bom:0.96.3"},"openclaw":{"requires":{"bins":[],"env":[],"credentials":"none"},"credential_policy":"Zero credentials required. Policy evaluation is local. Proxy operates on local network only. Policy files are user-provided and never transmitted.","credential_handling":"Policy and audit files may contain credential names but must not expose credential values. Redact token-like values before logging, displaying, or exporting runtime evidence.","optional_env":[],"optional_bins":[],"emoji":"🚫","homepage":"https://github.com/msaad00/agent-bom","source":"https://github.com/msaad00/agent-bom","license":"Apache-2.0","os":["darwin","linux","windows"],"data_flow":"Purely local. Policy evaluation runs on scan results in memory. Proxy intercepts MCP calls on local network only. Audit logs are written locally (JSONL). No data leaves the machine.","file_reads":["user-provided policy files (YAML/JSON policy-as-code)","user-provided audit log files (JSONL from agent-bom proxy)"],"file_writes":["proxy-audit.jsonl (local audit log, only when proxy is running)"],"network_endpoints":[],"telemetry":false,"persistence":false,"privilege_escalation":false,"always":false,"autonomous_invocation":"restricted","disable-model-invocation":true}}

agent-bom-enforce — Runtime Policy Enforcement

Enforces security policies on MCP tool calls and blocks dangerous operations at runtime. Runs a local proxy that intercepts MCP calls and evaluates them against policy-as-code rules.

Install

pipx install agent-bom
agent-bom proxy              # start enforcement proxy
agent-bom policy apply policy.yaml  # apply a policy file
agent-bom policy check       # check current policy status

When to Use

• "block risky calls" / "block dangerous MCP calls"
• "apply policy" / "enforce policy"
• "proxy" / "MCP proxy"
• "runtime protection"
• "policy enforcement"
• "intercept MCP calls"

Commands

# Start the enforcement proxy
agent-bom proxy

# Apply a policy file
agent-bom policy apply policy.yaml

# Check current policy status
agent-bom policy check

Example Policy File

# policy.yaml
rules:
  - id: block-shell-exec
    description: Block shell execution tool calls
    match:
      tool: "bash|shell|exec|run_command"
    action: block
    severity: critical

  - id: require-path-allowlist
    description: Restrict filesystem access to allowed paths
    match:
      tool: "read_file|write_file|list_directory"
      args.path:
        not_starts_with: ["/home/", "/tmp/"]
    action: block
    severity: high

Guardrails

• IMPORTANT: Do not start the proxy or apply policies without explicit user confirmation — enforcement changes how MCP calls are processed.
• Confirm the policy file contents with the user before applying.
• Do not enable proxy mode autonomously — always ask the user first.
• Audit logs are written locally only; no data is transmitted externally.
• This skill has disable-model-invocation: true — do not auto-run enforcement actions.