A
licenseNot graded
qualityB
maintenanceEnables any MCP-compatible agent to route its outbound tool calls and inbound tool responses through a boundary-enforced consent firewall that detects and minimizes sensitive fields per recipient, purpose and data type, pauses for user approval, quarantines prompt injections, and writes a tamper-evident privacy receipt for every decision. Sensitive values stay as vault tokens so the model provider never receives them unless policy explicitly allows it.
2 npm
MIT