Bouncer: An MCP Proxy That Blocks Agents from Leaking API Keys, Cutting Attack Success to 0
eccentric_ez · reddit · 2026-08-15
A developer built Bouncer, a local MCP proxy that prevents AI agents from executing malicious instructions (like leaking API keys) after reading untrusted content. It uses deterministic Python (no LLM) to gate outbound tool calls: destinations from untrusted output are denied, explicitly trusted ones allowed, and new ones ask once and remember. In benchmarks on AgentDojo's workspace suite, attack success dropped from 0.33 to 0.00 while benign utility remained 1.00. Currently MCP-only and stdio-only, with documented limits including cross-server taint propagation. The author invites discussion on potential attack paths.
More from Safety
- Anthropic report reveals 50k contractors accessed models without biorisk guardrails for 11 months — xeophon · 2026-08-15
- Zuckerberg's 6,537-word manifesto skips 'Europe' and 'regulation' — a policy pitch to DC — emmanuelvivier · 2026-08-15
- Stanford researcher argues CoT monitoring has fragile foundations and long-term risks — maksym_andr · 2026-08-15
- US to warn allies against joining Chinese AI initiatives — MarvinTBaumann · 2026-08-15
- Kimi Work caught attaching raw session history to feedback reports — ryanmerket · 2026-08-15
- Lawyers Warn: LLMs are Flawed for Direct Legislative Drafting — gleech · 2026-08-15