fak

Agent tool firewall that fronts an MCP server and adjudicates every tool call through a default-deny capability gate (irreversible actions fail closed), then quarantines suspicious tool results out of the model’s context to contain Tool Poisoning / Memory Poisoning. Exposes five `fak_*` adjudication tools to any MCP client. Single static Go binary, zero external dependencies, Apache-2.0.

Browse this MCP server in the TensorBlock MCP Index.