ssrf-protection

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

Security hooks and monitoring for Claude Code — quiet overrides, SSRF protection, MCP compression, OTEL tracing

An SSRF Handler for C# HttpClient and ClientWebSocket

Zero-auth, security-hardened cross-domain research MCP server: web, academic, GitHub, news, weather, macro/finance, SEC, biomedical, Bluesky, YouTube. SSRF and prompt-injection defenses.

Rust image toolkit for CLI, HTTP, and WASM with signed URLs, SSRF protection, and AVIF/WebP/SVG support.

A production-grade, security-hardened Laravel package for resumable chunked uploads, multi-source media management, SPA dashboard, and bulk deletion safety net.

Give AI agents bounded eyes on the public web: crawl, search, and normalize evidence without an unrestricted browser.

Multi-platform SSRF prevention library

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

Minimal Secure Evidence Gateway for Pi Coding Agent — search, web_search, web_fetch, research_search

MCP server for fetching web pages — SSRF-safe, readability-optimized, single Go binary. AI-optimized tool discovery.

Shared web infrastructure package for search, scraping, HTTP security, and stealth browsers. Used by wet-mcp and downstream applications.

Security-first FastAPI service for technical SEO auditing, SaaS acquisition scoring, bounded site crawling, page comparison, and first-party opportunity ranking.

Local-first narrative intelligence for analyzing news framing, bias, persuasion, and source diversity with your own API keys.

Cloudflare Worker favicon service for Vaultwarden — resolves icons at the edge so your server's IP is never exposed to saved sites. No third-party icon service.

An all-in-one, config-gated Laravel toolkit for signed inbound and outbound webhooks, customer-managed endpoints, and delivery observability

Self-hosted favicon API for Node.js — zero dependencies, multi-source fallback for bot-blocked sites, caching, and SSRF protection.

Faraday middleware to prevent SSRF attacks

🇮🇳 India-first pre-launch scanner. Reads your actual privacy, terms and refund pages — not just your homepage — to check DPDP, RBI, CERT-In and consumer-rule readiness. 39 checks, every verdict labelled verified / likely / needs-your-check. Free, no signup, no API keys.

Secure, local-first document-to-Markdown conversion. Zero-trust input sanitization, multi-column PDF layout, LaTeX math, PII masking. No cloud dependencies.