Open-Source MCP Proxy Aggrete Blocks AI Tool Attacks Using Deterministic Rules

·1 views

A new open-source tool called Aggrete acts as a proxy for Model Context Protocol (MCP) systems, blocking known AI security attacks through deterministic rules rather than probabilistic AI-based filters. Unlike model-driven defenses, Aggrete applies fixed policy rules before any upstream server is contacted, ensuring the same request always receives the same response. The tool addresses three major attack types: the "lethal trifecta" prompt-injection exfiltration method documented by Invariant Labs in 2025, tool poisoning via hidden instructions in tool descriptions, and rug pulls where tool definitions are swapped after approval. Aggrete counters these by tracking session-level data flows, fingerprinting tools on first use, and scanning descriptions for malicious patterns — all without involving a language model in the decision. The project is installable via pip and ships with reproducible attack demonstration scripts that run locally without servers, API keys, or network access.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Career Changer Documents Every AWS Serverless Pitfall in Cloud Resume Challenge Build

A former insurance operations professional completed the Cloud Resume Challenge to transition into cloud engineering, building a serverless resume site hosted on AWS. The project uses a private S3 bucket behind CloudFront with Origin Access Control, a Lambda-powered visitor counter backed by DynamoDB, and is fully managed via Terraform and deployed through GitHub Actions. During the build, a domain registration failure on Route 53 was traced to a fraud alert triggered by an account upgrade, leaving a support case unresolved for two days. A separate issue arose when an ACM certificate request failed because DNS validation required a Route 53 hosted zone that did not yet exist, creating a dependency deadlock. The developer worked around both blockers by continuing progress on unaffected components and upgrading to a paid support plan to accelerate AWS's response.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AWS AI Agents Power Real-Time Maritime Vessel Monitoring System

A technical guide published on DEV Community on September 8 details how to build a maritime watch floor using AI agents on AWS. The system is designed to monitor ships that go 'dark,' meaning vessels that stop transmitting location or identification signals. Author Shadab Hussain, an AWS Community Builder, outlines the architecture and system design behind the agentic AI solution. The project leverages AWS cloud infrastructure combined with agentic AI to enable continuous, automated maritime surveillance. The write-up, estimated at a 20-minute read, covers topics including AI, AWS, agentic AI, and system design.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Debugging Tools Cut Bug Resolution Time but Only 6% of Teams Use Them Fully

According to a 2026 JetBrains survey, only 18% of developers trust AI debugging assistants to produce production-ready fixes without human review, while adoption remains shallow across the industry. New data from Sentry shows top AI debugging tools resolve 41% of production bugs within 24 hours, compared to just 13% for human-only teams. A Snyk 2026 report attributes 73% of critical post-release bugs to AI-generated code, underscoring the growing complexity of modern software pipelines. OpenAI reportedly reduced its median bug resolution time by 66%, from 41 hours to 14 hours, after deploying a hybrid Copilot-Sentry AI triage system across its ChatGPT API team. Gartner data from 2026 indicates that 38% of companies adopting advanced AI debugging tools reduced incident response costs by a median of $15,400 per team annually.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

41% of AI Integration Projects Fail or Overspend, Gartner 2026 Data Shows

A 2026 industry analysis highlights that 41% of AI software integration projects exceed budget or fail entirely, even as 88% of US enterprises rank AI-powered integration as their top IT priority. The median annual spend on AI integration stands at $624,000, well below the $1.4 million average cost of a failed project, creating significant financial risk for organizations. Experts identify poor model selection, dirty data, and lack of real-time monitoring as the leading causes of failure, with 72% of integration errors linked to inconsistent or incomplete data. Automated validation tools, continuous model monitoring platforms, and early-stage compliance checks are recommended as essential safeguards rather than optional add-ons. Non-compliant AI integrations averaged $2.2 million in regulatory fines in 2026, underscoring that security and data governance must be built in from the start.

0 comments Read more at DEV Community