Open-Source Local Firewall for MCP
Simple-Factor-2165 · reddit · 2026-07-14
A developer has created MCP-Shield, an open-source local firewall designed to protect AI agents' MCP tool calls.
The core pain point: once an agent gets shell or tool permissions, it can be tricked by a single prompt injection into executing unintended actions. Existing permission systems often rely on the client, so the author chose to build a local proxy one layer below the MCP transport layer.
Design goals:
- Automatically allow obviously safe tool calls;
- Block obviously dangerous commands;
- Pause suspicious operations, executing them only after the user confirms, modifies, or rejects them.
The author explicitly states this doesn't "solve" prompt injection; if an attacker operates entirely within tools you already trust, the proxy can only do so much. However, it provides a unified layer of protection for clients like Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Codex CLI.
Project commitments:
- 100% local execution;
- No cloud services, no accounts, no telemetry;
- MIT open-source license;
- Approval interface is a local web UI.
More from coding & agent
- HeyGen adds a media-sourcing skill for coding agents with 75k images and 10k tracks — HeyGen · 2026-07-22
- Agent search bottlenecks are now about variance, not raw latency — rohanpaul_ai · 2026-07-22
- LangSmith adds tracing for Pipecat, LiveKit, OpenAI Realtime, and Gemini Live — LangChain · 2026-07-22
- An MCP server signs every AI agent tool call into a verifiable Merkle chain — Funky_Chicken_22 · 2026-07-22
- Annotated transcript of a Claude Code team interview is now available — trq212 · 2026-07-22
- Claude Code skill uses 10 Markdown rules to make outputs ADHD-friendly — alex_verem · 2026-07-22