bluerock

Overview

BlueRock is a lightweight runtime security sensor for Python MCP servers. It hooks into Python at startup to capture MCP tool calls, session lifecycle, module imports with SHA-256 verification, and subprocess execution. The sensor writes structured NDJSON events to a log file, providing visibility into what your Python applications are doing at runtime without requiring any code changes. It uses two mechanisms: wrapt monkey-patching for MCP protocol libraries and sys.meta_path import hooks for supply-chain visibility.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

Comparable tools

Installation

# Install from PyPI
pip install bluerock[oss]

# Create configuration
echo '{"enable": true, "mcp": true}' > ~/.bluerock/bluerock-oss.json

# Run your Python script with BlueRock
python -m bluepython --oss your_script.py

{
  "mcpServers": {
    "bluerock": {
      "command": "python",
      "args": ["-m", "bluepython", "--oss"]
    }
  }
}

FAQ

Does BlueRock require code changes to my Python application?

No, BlueRock works with zero code changes. It wraps your Python process at startup.

What events does BlueRock capture?

BlueRock captures MCP tool calls, resource access, session lifecycle, module imports (with SHA-256), and subprocess execution as structured NDJSON events.

On Hacker News

Recent discussion from the developer community.

• Show HN: MCP Python Hooks – sys.addaudithook and import hooks for MCP▲ 4
  Story by BlueRock-Jake · 2026-05-06

Compare bluerock with