Bouncer, an MCP proxy that denies sends to addresses the agent read
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Bouncer is an early, local MCP proxy that blocks an agent's send or share calls to any destination that first appeared in untrusted tool output, such as a poisoned email or document. Decisions are deterministic rather than LLM-based, and every allow, deny and ask is logged for review.