Bouncer

About

Bouncer is a local MCP proxy that denies an agent's send and share calls to destinations that first appeared in untrusted tool output, such as a poisoned email or ticket. Its rules are deterministic, with no LLM in the decision, and every allow, deny and ask is logged. It also enforces path confinement, argument checks and per-session call budgets. In its AgentDojo run it blocked all sends, so legitimate send tasks fell from 4/6 to 0/6.