The Application Firewall for the Model Context Protocol (MCP). Protects Agents and RAG pipelines from Confused Deputy attacks and indirect injection.