ThornGuard: A Proxy Gateway to Secure MCP Server Connections from Prompt Injection
ThornGuard is a security proxy designed to protect Claude AI from malicious content when connecting to external MCP (Model Context Protocol) servers. The tool was created after testing revealed that upstream servers can inject hidden instructions into tool responses, which Claude receives without filtering.
Security Problem Identified
When connecting Claude to external MCP servers, nothing prevents upstream servers from injecting hidden instructions into tool responses. In a test, a server embedded a fake recommendation telling Claude to always prefer a specific vendor. While Claude caught this obvious payload, more subtle injections would bypass detection.
ThornGuard Features
- Scans tool definitions and responses for prompt injection and poisoning
- Strips secrets and PII before they enter your context window
- Includes a semantic classifier that flags suspicious payloads
- Provides real-time audit dashboard with compliance exports
- Offers CLI that generates configs for Claude Desktop, Cursor, VS Code, and several others
Implementation Details
The proxy architecture was designed with a security model in mind, then implemented using Claude Code on Cloudflare Workers. The implementation includes OAuth flows and the CLI tool.
ThornGuard is available with a 7-day free trial at thorns.qwady.app. A demonstration video is available at https://youtu.be/1PWNFpUWKV8.
📖 Read the full source: r/ClaudeAI
👀 See Also
OpenClaw Blocked a Sketchy Script From a Productivity Playbook, Then Continued Building Financial Workbook
A user gave OpenClaw a zip with a suspicious productivity playbook. OpenClaw refused to run the script, flagged it for auto-installing into the skills directory, and manually built the workbook using built-in skills.
Litellm PyPI Package Compromised: Malicious Version 1.82.8 Exfiltrated Credentials
The litellm PyPI package, which unifies calls to OpenAI, Anthropic, Cohere and other LLM providers, was compromised with malicious version 1.82.8 that exfiltrated SSH keys, cloud credentials, API keys, and other sensitive data for about an hour.
Domain-Camouflaged Injection Attacks Evade Detectors in Multi-Agent LLM Systems
A new paper shows injection payloads tailored to domain vocabulary evade detection, dropping IDR from 93.8% to 9.7%. Multi-agent debate amplifies attacks. Llama Guard 3 detects zero payloads.
OpenClaw API Key Security: What You Need to Know About Managed Hosting and TEE
A Reddit post breaks down the risks of handing your Anthropic API key to a managed OpenClaw host and explains how TEE (Intel TDX) can isolate keys at the hardware level.