Blackwall
Put a risk gate in front of agent tools before irreversible SQL, payments, or delete operations.
Overview
Blackwall is an MCP server for the Ship phase that gates AI agents before irreversible financial, SQL, or delete actions using observe or enforce modes.
What is this MCP server?
- Pre-action risk gate for money, SQL, and delete-class operations
- Modes: observe (log only) or enforce (default block/allow policy)
- Requires BLACKWALL_API_KEY (bw_live_…) from blackwalltier.com dashboard
- npm stdio package blackwall-mcp v1.1.1
- Designed for coding agents that can call irreversible tools
- Server version 1.1.1
- npm package blackwall-mcp
- Modes: observe and enforce (enforce default)
What problem does it solve?
Your coding agent can invoke production tools that spend money or destroy data, and you have no automated checkpoint before those actions run.
Who is it for?
Indie builders running agents against live Stripe, databases, or admin APIs who want enforceable guardrails beyond prompt warnings.
Skip if: Static analysis-only workflows with no agent tool execution, or teams unwilling to manage a Blackwall API key and policy modes.
What do I get? / Deliverables
Irreversible agent actions pass through a Blackwall risk decision so you can log, block, or approve based on policy before damage occurs.
- Logged or enforced decisions on high-risk agent tool calls
- Calibrated observe-then-enforce rollout path
- Reduced blast radius for autonomous production actions
Recommended MCP Servers
Journey fit
How it compares
Runtime agent action firewall, not vulnerability scanning or DNS auditing.
Common Questions / FAQ
Who is Blackwall for?
Developers using autonomous coding agents with access to production payments, SQL, or delete capabilities who need a dedicated pre-action gate.
When should I use Blackwall?
Use it as soon as agents can touch irreversible operations—start in observe mode during Ship hardening, then enforce for production Operate workflows.
How do I add Blackwall to my agent?
Install blackwall-mcp via npm, set BLACKWALL_API_KEY and optional BLACKWALL_MODE, and register the stdio server in your MCP client.