# Bouncer - llms.txt
> A governed gateway for AI agents, APIs and MCP servers.
> https://bouncer.run

## What Bouncer is

Bouncer is an AI gateway that sits between your agents and the APIs or MCP servers they call. You register an agent or paste an OpenAPI spec, and Bouncer gives you a single proxy URL with governance, observability and optional per-call payments.

## Core capabilities

- Security Check: vet npm packages and remote MCP servers before installing them. Paste a name (`axios@1.20.0`) or MCP address and get a verdict (on the list / worth a look / turned away), a risk score and plain-language findings: install scripts and what they actually contain, obfuscation, credential access, outbound domains, known advisories, hidden instructions and invisible characters in MCP tool descriptions. Free, no account needed: https://bouncer.run/check
- OpenAPI-to-MCP conversion: paste a Swagger/OpenAPI URL and Bouncer generates MCP tools, serves them over Streamable HTTP, and produces a drop-in WebMCP snippet.
- One proxy URL per agent or API: callers use `https://bouncer.run/api/public/gw/<slug>` instead of the real backend URL.
- Allow and deny lists: whitelist trusted tools, blacklist patterns like `delete_*`, default-deny optional.
- Scoped gateway keys: issue keys with per-minute rate limits, daily quotas and hard spend caps.
- Live call log: tool name, decision, latency, status, tokens and payment receipts for every request.
- WebMCP ready: copy a snippet from any agent so browser-based AI clients can call governed tools directly.
- x402 payments: charge per tool call in USDC on Base, Sepolia or Avalanche. Bouncer takes no cut; the caller pays the exact amount you set plus network fees.

## How an agent publishes an API

1. Sign up at https://bouncer.run/auth.
2. Add an agent in the dashboard.
3. Paste an OpenAPI/Swagger URL or configure a manual proxy target.
4. Set allow/deny policies, rate limits and optional x402 pricing.
5. Copy the gateway URL, SKILL.md or WebMCP snippet and hand it to callers.

## How a caller uses a published API

1. Request access in the Agent Portal or receive a gateway key from the API owner.
2. Call `https://bouncer.run/api/public/gw/<slug>` with the gateway key header `x-gateway-key: <key>`.
3. For MCP clients, use the Streamable HTTP endpoint or WebMCP snippet provided by the agent.
4. If x402 is enabled, attach the `x402` payment header; the facilitator settles on-chain and the receipt appears in the call log.

## WebMCP and MCP tools

The hosted page at https://bouncer.run exposes WebMCP tools under `window.__webmcp.tools`. Public tools (no account needed) include `security_check_scan` (check an npm package or MCP server and get verdict, risk score, findings and report link), `security_check_get_report`, `security_check_recent`, `bouncer_overview`, `bouncer_navigate` and `bouncer_how_to_publish_api`. After signing in, additional account-scoped tools are available: `bouncer_list_apis`, `bouncer_get_api`, `bouncer_list_calls`, `bouncer_usage_summary`, `bouncer_create_api`, `bouncer_add_policy` and `bouncer_set_api_active`.

Remote agents can use the OAuth-protected MCP endpoint at `https://bouncer.run/mcp` with the same tool surface. Full documentation: https://bouncer.run/webmcp

## Pricing

The Bouncer gateway is free: unlimited agents, unlimited keys, policies, rate limits, call logs and OpenAPI-to-MCP generation. When an API owner enables x402, the caller pays the owner-configured amount per call in USDC; Bouncer does not add a platform markup or monthly subscription. A sandbox facilitator is available at https://x402.org/facilitator for testing.

## Learn more

- Home: https://bouncer.run
- Security Check: https://bouncer.run/check
- Pricing: https://bouncer.run/pricing
- WebMCP tools documentation: https://bouncer.run/webmcp
- What is an MCP gateway?: https://bouncer.run/mcp-gateway
- Blog: Hello, agent!: https://bouncer.run/blog/hello-agent
- x402 spec: https://x402.org
- Sandbox facilitator: https://x402.org/facilitator

## Contact

Built by Nader. For support or feedback, reach out through the dashboard or email nader@cserny.com.