Google Antigravity's agents run terminal commands, edit and delete files, run migrations, and push code on their own. Black_Wall is the check that runs before any irreversible one — added as an MCP server in about 60 seconds.
An agent that can rm -rf, git push --force, run a migration, or DROP TABLE on its own will eventually do one of those at the wrong moment. Rollback, insurance, and observability all kick in after the damage. Black_Wall runs before the action: your Antigravity agent calls one tool, forecast, and gets back a risk score (0–100), the red flags it found, and a GO / CONFIRM / STOP gate — in time to stop.
mcp_config.json and reload:{
"mcpServers": {
"blackwall": {
"command": "npx",
"args": ["-y", "blackwall-mcp"],
"env": { "BLACKWALL_API_KEY": "bw_live_your_key_here" }
}
}
}
Then tell the agent, in your Antigravity rules: “Before any irreversible action, call the forecast tool first and stop if it returns STOP.”
rm -rf on the wrong path, git push --force over someone's workDROP/TRUNCATE, or a DELETE/UPDATE with no WHEREEach maps to a named red-flag code from the 28-mode taxonomy — so the agent gets a reason, not just a refusal.
Not ready to let a guardrail block your agent? Add "BLACKWALL_MODE": "observe" to the config. It scores and logs every action but never blocks — your agent behaves exactly as today. Review your dashboard after a week to see what it would have caught, then switch to enforce.
Paste an action your agent might run and watch Black_Wall gate it — no signup.
Full setup + other MCP hosts: the integration guide →