mcpwall

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.