A
licenseNot graded
qualityB
maintenanceSits between an MCP client and its upstream tool servers, scanning every tool output for injected instructions, hidden text, and smuggling tricks, and stripping them before the model sees them. Tracks session taint so risky egress or destructive calls are blocked, held for human approval, or checked against allowlists and DLP rules, with every decision logged.
MIT