Stdio MCP proxy that denies agent sends to destinations first seen in untrusted tool output.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Stdio MCP proxy that denies agent sends to destinations first seen in untrusted tool output.