CoworkGuard

Local firewall for AI agents- monitors outbound API requests. Blocks sensitive data before it leaves your machine.

CoworkGuard: macOS AI Agent Security Layer. Your AI agent firewall. Blocks sensitive data leaving your machine, intercepts MCP tool responses before they reach the model, and now detects Chrome's built-in AI (Prompt API) usage and suspicious extensions harvesting your AI conversations. This Chrome extension requires the free CoworkGuard macOS app to work. Download it first at coworkguard.com What it protects against: - PII: SSNs, credit cards, passport numbers, email addresses - API keys and credentials across all major AI providers - Private keys, JWTs, and authentication tokens - Database connection strings and internal infrastructure data - .env file values and secrets - Prompt injection in MCP tool responses - Tool metadata changes and rug-pull attacks - Hidden unicode and steganographic content in tool output - Chrome built-in AI (Gemini Nano) usage via the Prompt API - Extensions harvesting your AI conversations by overriding fetch() Seven layers of protection: - Payload scanner: intercepts and scans every outbound AI API request across 10 AI APIs - MCP Trust Gateway: scans tool responses before they reach the LLM, blocks injection and credential leaks - Skill scanner: watches Cowork, OpenClaw and MCP skill files for supply chain attacks before they execute - Clipboard monitor: warns when sensitive data is copied to clipboard - File write monitor: warns when sensitive data is written outside allowed folders - Domain guard: warns when you navigate to sensitive pages while an AI session is active - Prompt API detector: detects websites using Chrome's built-in AI and flags suspicious extensions intercepting your conversations Folder access control: - Declare which folders AI tools are permitted to read from. Content from all other folders is blocked at the API exit point. Requirements: macOS 12 (Monterey) or later Companion macOS app required (free): coworkguard.com Everything runs locally. No accounts, no cloud, no telemetry. Your data never leaves your machine. Download the macOS app: coworkguard.com