Catch the exfil, not the payload. Deterministic, model-free MCP proxy that blocks toxic agent flows — untrusted-web → sensitive-read → external-egress — before they leave the endpoint.
-
Updated
Sep 17, 2026 - Python
Catch the exfil, not the payload. Deterministic, model-free MCP proxy that blocks toxic agent flows — untrusted-web → sensitive-read → external-egress — before they leave the endpoint.
Find which clients send toxic flow from fill markouts, with honest error rates for overlapping horizons
To associate your repository with the toxic-flow topic, visit your repo's landing page and select "manage topics."