FLAGSHIP 03 // 100% LOCAL AI AGENT & MCP FIREWALL ZERO THIRD-PARTY CLOUD PROXY

Strip Secrets Before Prompts Leave Your Rig. Freeze Rogue MCP Commands in 0.21ms.

Name: Agent Sentinel (C1-AG) Pro
Price: 29.00 USD
Availability: InStock
Author: Cyzog

Cursor, Claude Code, Windsurf, and MCP servers run with full filesystem and shell privileges. One indirect prompt injection can silently exfiltrate ~/.ssh, .env, or AWS keys—or wipe a repo. Agent Sentinel (C1-AG) intercepts every LLM prompt and MCP tool call 100% locally on your CPU.

DROP-IN LOOPBACK GATEWAY & STDIO MCP WRAPPER

ANTHROPIC_BASE_URL=http://127.0.0.1:8787/anthropic   # <0.6ms ONNX Token Redactor
AgentSentinel.exe mcp-wrap -- npx -y @modelcontextprotocol/server-filesystem ./src

Acquire Personal Pro — $29 Lifetime Run Free MCP Exposure Audit (.exe)

0.58 ms

ONNX NER Redact

0.21 ms

NtSuspendProcess

100%

SSE Rehydration

0 Proxies

127.0.0.1 Loopback

REDACTOR: <CYZOG_SECRET_1>

~/.SSH & .ENV: SHIELDED

§ 01 // REFERENCE INTERCEPTOR ARCHITECTURE

RECORDED BENCHMARK SCENARIOS // 127.0.0.1

Cloud LLMs Never See Your Keys. Your Local Code Never Breaks.

Inspect how C1-AG intercepts three real-world AI coding failure modes locally on 127.0.0.1 without routing proprietary source code through a third-party SaaS gateway.

LOCAL IDE / AGENT INPUT RAM ONLY

WHAT LEAVES LOCALHOST 0.58 ms CPU

LOCAL REHYDRATED RESULT ZERO LEAKAGE

§ 02 // SIX AUTONOMOUS SUBSYSTEMS

Engineered for Autonomous Coding Agents

[01 // ONNX TOKEN NER]

Sub-Millisecond Secret & PII Redactor

Embedded quantized local ONNX token classifier + structural recognizers strip OpenAI, Anthropic, GitHub, AWS, Stripe, JWT, DB URIs, and Luhn payment cards in 0.58 ms while leaving 40-char Git commit SHAs and UUIDs untouched.

[02 // SSE STREAM REHYDRATION]

Split-Chunk Safe Response Restoration

Replaces secrets deterministically per session (<CYZOG_SECRET_1>) and restores them across chunked text/event-stream SSE responses so generated code compiles locally with zero manual copy-pasting.

[03 // STDIO MCP FIREWALL]

JSON-RPC 2.0 Credential Store Guard

Transparent mcp-wrap proxy inspects every tools/call and blocks silent reads to ~/.ssh, ~/.aws, ~/.kube, Chrome/Edge Login Data, and crypto wallets.

[04 // NTSUSPENDPROCESS GUARD]

1-Click Blast-Radius Approval HUD

Watches child processes spawned by Cursor, Claude, Windsurf, and VS Code. Freezes rm -rf, Remove-Item -Recurse, DROP TABLE, and git reset --hard in 0.21 ms for 1-click HUD approval or termination.

[05 // INJECTION SHIELD]

Indirect Prompt-Injection Neutralizer

Scans untrusted MCP scraper, repo, and database tool outputs for hidden instruction overrides, Unicode tag smuggling (U+E0000), and Markdown image exfiltration beacons (![x](https://...)).

[06 // SOC2 / ISO 27001 DLP]

SHA-256 Chained Compliance Ledger

Proves to security auditors that zero secrets leaked to external LLMs using an append-only SHA-256 hash-chained JSONL audit log—without ever writing raw secret strings to disk.

§ 03 // SOVEREIGN DEVELOPER & TEAM LICENSING

Impulse-Priced for Solo Devs. Audit-Ready for Security Teams.

100% offline Ed25519 cryptographic activation. Zero cloud accounts, zero prompt logging servers.

PERPETUAL LICENSE // SOLO DEVELOPER UP TO 3 DEV RIGS

Agent Sentinel Personal Pro

Cursor, Claude Code, Windsurf & VS Code

$29 USD · Lifetime

One-time payment · Perpetual v1.x updates · Offline Ed25519 .lic

[✓]Loopback 127.0.0.1:8787 Proxy for OpenAI, Anthropic, Gemini & OpenRouter
[✓]Sub-3ms ONNX Token NER Redactor (<CYZOG_SECRET_1>) + SSE Rehydration
[✓]Stdio mcp-wrap Firewall Blocking ~/.ssh, ~/.aws & Browser Vaults
[✓]NtSuspendProcess / SIGSTOP Rogue Shell Freeze + 1-Click Approval HUD
[✓]1-Click IDE Auto-Shield Wizard with Byte-Exact Backup & Restore
[✓]Licensed for up to 3 Personal / Freelance Workstations

Acquire Personal Pro — $29 Lifetime

ENTERPRISE AI GOVERNANCE // SOC2 & ISO 27001 FLEET DLP

Team Compliance Edition

Engineering Orgs, FinTech, Defense & Healthcare

$199 USD / seat / year

Zero source code routed through third-party cloud gateways

[+]Everything in Personal Pro across Windows, macOS & Linux developer fleets
[+]Signed Central Policy JSON (enforce mandatory MCP allowlists & PII redaction)
[+]Tamper-Evident SHA-256 Hash-Chained DLP Audit Logs for SOC2 / HIPAA / ISO 27001
[+]Local Syslog / SIEM CEF Telemetry Export (Splunk, Sentinel, Wazuh)
[+]Custom Regex & Proprietary Internal Codeword Tokenizer Rules
[+]Offline Multi-Seat Ed25519 Fleet Certificate & Priority Engineering SLA

Request Team Compliance License ($199/seat/yr)

Direct Engineering Contact: hello@cyzog.com

SYSTEM PARAMETER MATRIX // C1-AG v1.0.0

Runtime & Integration Ledger

Supported AI IDEs & Agents: Cursor, Claude Code, Claude Desktop, Windsurf, VS Code, Cline, Continue, OpenClaw
Supported Upstream LLM APIs: OpenAI, Anthropic, Google Gemini, OpenRouter, Groq & Custom OpenAI-Compatible
Embedded Neural Engine: Quantized Local ONNX Token NER (0.58 ms CPU · Native x64 Binary · No GPU Required)
Network Binding Guarantee: Strict 127.0.0.1 Loopback (Refuses 0.0.0.0 LAN bind by design)
Operating Systems & Packaging: Windows 10/11 x64 Native Machine-Code Binary (.exe HUD + CLI) · macOS/Linux Fleet Binaries (Team Edition)