← Back to the registry
Agent passport

BlueRock Agentic Sandbox and Secure MCP Server 2.0 - FastMCP - Free

BlueRock · Cybersecurity & IT

No attestation published

Certification per AWS Marketplace.

Provenance reach4 of 12 layers traced

Evidence tier Source Confirmed · 4 captures on record

User ratingNot rated0 reviews on the listing
Runs onUnknownVirtual machine
ProvenanceUnknown44% of the provenance layers this product can disclose
Evidence riskHighSign in to see the basis for this band.

What the publisher says

As described on AWS Marketplace.

With BlueRock Guardrails built into the Amazon Linux 2023 distribution, an agentic sandbox and FastMCP running on top of the instance, agentic builders get the best of both worlds. A pythonic framework to build MCP servers fast, and security built in that protects against runtime exploits with full visibility and detection capabilities for Development and Security teams.

This free offering provides real-time visibility and alerting to help teams understand and protect FastMCP server runtime behavior. It includes:

Show the rest of the publisher’s description (13 more lines)
  • BlueRock Amazon Linux 2023 (pre-hardened base image)
  • BlueRock Agentic Sandbox
  • FastMCP Pythonic Framework
  • Sample FastMCP-based server

Default monitoring to protect entire classes of both known and unknown agentic AI attacks, including 70 percent of the CISA KEV.

  • Python and Java Application Runtime Guardrails. Detects and prevents exploits via deserialization, SSRF, path traversal, and other code-level exploits.
  • Provides capabilities for full MCP protocol inspection and blocking.
  • Config Drift Detection. Identify tool, tool argument and other control modifications on an MCP server.
  • Reverse shell protection. Kills post-exploitation command-and-control attempting remote shell C2 compromise.
  • Container drift protection. Prevents execution of binaries not in the original image classic malware drop behavior.
  • Capability escalation control. Blocks attempts to add elevated Linux capabilities and expand blast radius.
  • Host namespace escape prevention. Stops container breakouts to host namespaces.

The free tier operates in observability mode, providing visibility and alerting with event export to AWS CloudWatch or alternative OTEL collectors. Paid tiers enable enforcement (block mode) and customizable policy controls for teams that require active runtime prevention.

Highlights

Highlighted by the publisher on AWS Marketplace.

Fast - build agents in a sandbox with full visibility into agentic actions

Secure by Default - Run MCP servers on top of the FastMCP framework for quick and secure deployment of servers

Agent build and provenance

See the full provenance

The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.

Create a free account

Plans and pricing as listed

22 listed
t3.xlarge
  • Hrs
$0.00
r5.large
  • Hrs
$0.00
i4i.xlarge
  • Hrs
$0.00
r5n.2xlarge
  • Hrs
$0.00
m5.large
  • Hrs
$0.00
d3.2xlarge
  • Hrs
$0.00
c5.2xlarge
  • Hrs
$0.00
r5n.large
  • Hrs
$0.00
d3.4xlarge
  • Hrs
$0.00
c5.large
  • Hrs
$0.00
c5.xlarge
  • Hrs
$0.00
t3a.medium
  • Hrs
$0.00
and 10 more plans on the listing

Refund terms

As stated by the publisher on AWS Marketplace.

The product is available for free. No refunds are available.

Sources

Marketplace listingaws.amazon.com ↗Source
App certificationaws.amazon.com ↗Source
CustomEulaCustomEula ↗Source

Linked repositories

RepositoriesUnknownUnknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.

Pricing
Paid
22 plans listed
Delivery
Virtual machine
customer-support@bluerock.io
Open the source listing ↗

Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.