Request Shield — a security checkpoint for outbound API requests

I built Request Shield — a security checkpoint for outbound API requests.

Before your application sends a request to another server, Request Shield inspects its metadata and returns one of three verdicts:
✅ Allow
⚠️ Review
🛑 Block

It currently checks for:
• SQL and command injection patterns
• SSRF and private-network destinations
• Exposed API keys and credentials
• Dangerous routing headers
• XSS and path traversal patterns
• Unsafe methods, URLs, content types, and payload sizes

Developers can integrate it through a REST endpoint, Node/TypeScript wrapper, AI installation prompt, or MCP configuration.

I’ve launched it as a free public beta with 100 checks per day. Every security check is included—there’s no feature paywall.

There’s also an interactive playground with safe and malicious sample requests, plus copy-and-paste Postman tests.

Try it here: https://request-shield-web.vercel.app/

I’d especially appreciate feedback on:

1. Installation clarity
2. False positives or missed threats
3. Features needed before using it in production

Request Shield is an additional security layer, not a replacement for validation, authorization, rate limiting, or a WAF.