{
  "id": 14954627,
  "title": "Lessons learned building Fronteira, an MCP proxy with behavioral guardrails",
  "url": "https://urgent.news/2026/10/16/lessons-learned-building-fronteira-an-mcp-proxy-with-behavioral",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-16T12:39:23.000Z",
  "source": {
    "name": "Lobsters",
    "slug": "lobsters",
    "url": "https://wiki.alcidesfonseca.com/blog/lessons-learned-building-fronteira/"
  },
  "original_language": "en",
  "account": "Lessons Learned Building Fronteira, an MCP Proxy with Behavioral Guardrails\n\nThe author, an expert in AI, Software Engineering, and Programming Languages, developed a harness using dependent types and information-flow policies to prevent attacks involving the lethal trifecta. However, they realized that requiring users to write liquid types was unrealistic and creating a custom SDK for every external interface was impractical.\n\nFronteira, an MCP proxy designed to make technical ideas accessible to a wider audience, acts as a behavioral firewall. Users log in through a browser, add integrations with various services, and authenticate their harnesses with Fronteira. All MCP interactions go through Fronteira, allowing it to track behavior across multiple MCP servers and prevent attacks by centralizing data and logging tool calls.\n\nFronteira also allows users to write rules in natural language, which are then translated into the Guard DSL for deterministic evaluation. However, limitations exist, such as harnesses accessing the filesystem and internet directly, bypassing Fronteira. Implementing support for dynamic tool lists and handling schema changes also proved challenging. Trusting Codex with DevOps was found to be optimistic, as demonstrated by an incident where the AI changed the server root, exposing sensitive data.",
  "summary": null,
  "key_points": [
    "Fronteira acts as a behavioral firewall for MCP interactions",
    "Users log in via browser, add integrations, authenticate harnesses",
    "Rules written in natural language translated to Guard DSL for evaluation"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}