[ DOCS // QUICKSTART SEQUENCE ]

Zero to first intercept in 10 minutes.

No agent code changes. Install the proxy, change one URL, write one policy file. Your first audit trail appears within minutes.

Install the proxy

3 commands. Runs as a Docker container or binary in your VPC.

TERMINAL

# Pull the proxy image
docker pull sentnelops/mcp-firewall:latest

# Create config directory
mkdir -p ~/.sentnelops

# Run the proxy (replace YOUR_API_KEY with your dashboard key)
docker run -d \
  --name sentnelops-proxy \
  -p 8080:8080 \
  -v ~/.sentnelops:/config \
  -e SENTNELOPS_API_KEY=YOUR_API_KEY \
  sentnelops/mcp-firewall:latest

Route your first MCP server through the wire

Change one URL in your agent config. That is all.

BEFORE — mcp-config.yaml

claude_code:
  mcp_servers:
    github:
      url: "https://api.github.com/mcp"

⟨ change one line ⟩

AFTER — mcp-config.yaml

claude_code:
  mcp_servers:
    github:
      url: "http://localhost:8080/proxy/github"  # ← only change

Arm your first policy

5 lines of YAML. Plain English. Enforced immediately.

~/.sentnelops/policy.yaml

policies:
  claude-code:
    github:
      allow: [read_file, create_pr, list_repos]
      block: [delete_repo, delete_branch, delete_file]

Watch the first verdict land

Run any agent command. It appears on the command deck within seconds.

SENTNELOPS — LIVE MCP CALL MONITOR

1 agent active

14:31:05.221claude-code→github-mcp/read_file

PERMITTED7ms

First call logged. Your audit trail has started.

[ NEXT COORDINATES ]

· Add more MCP servers to the proxy config
· Expand your policy with per-environment rules and blast radius thresholds
· Connect Slack for real-time violation alerts
· Export the call log CSV for your first SOC 2 evidence request

UNLOCK THE FULL POLICY ENGINE