bugwarden

bugwarden exposes Bugzilla to MCP (Model Context Protocol) clients through a guard policy that the client can neither read nor change. The policy is a TOML file read once at startup and decides, per bug, which of thirteen capabilities a client is granted, so an operator can expose a Bugzilla instance to an LLM client while keeping undisclosed security bugs, private comments and write access out of reach. Denials are uniform: a bug hidden by policy is indistinguishable from one that does not exist, and search results filtered by policy are dropped silently. What the client may not see, the operator can: an optional append-only audit stream records every tool call together with the guard's verdict.