pipelock Turned Off Its MCP Listener State Token by Default and Closed a 'Mediated Metrics Oracle'

GitHub·medium signalXBlueskyLinkedInCopy link

luckyPipewrench/pipelock (795 stars) — an agent egress firewall that scans mediated HTTP, MCP, A2A and WebSocket traffic for exfiltration, SSRF and prompt injection while emitting mediator-signed action receipts — landed two notable fixes in the last 24 hours: #1259 defaults the MCP listener state token off (2026-08-15 00:07 UTC) and #1258 closes the mediated metrics oracle in the proxy/contain path (2026-08-14 22:17 UTC). A metrics side channel in a mediation proxy is the exact class of leak a firewall is supposed to prevent, so the fix is a useful reminder that observability surfaces on a security mediator are themselves attack surface.