Tool · curated 18 Aug 2026
customhouse/docs/false-positives.md at main · vineetpant/customhouse
First reported github.com
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
customhouse offers defenders a deterministic, content-agnostic mechanism to stop MCP prompt-injection data exfiltration and candidly reports its false-positive cost, which matters for anyone hardening agentic tool-calling pipelines.
customhouse is an MCP proxy that blocks prompt-injection exfiltration by tracking data provenance rather than inspecting content: once a session receives a result from an untrusted upstream MCP server, calls that move money or send data out are refused for the rest of the session. The write-up reports it blocked 11 of 11 injection scenarios but also flagged 4 of 10 benign workflows that used a sink, and analyzes each false positive.