pipelock turned off its MCP listener state token by default and closed a mediated metrics oracle.

luckyPipewrench/pipelock (795 stars), an agent egress firewall that scans mediated HTTP, MCP, A2A and WebSocket traffic for exfiltration, SSRF and prompt injection, landed both fixes in 24 hours. GitHub A metrics side channel in a mediation proxy leaks exactly what the proxy exists to protect. Observability surfaces on a security mediator are attack surface. Audit your own /metrics endpoint for anything that varies with request content.