1. Conduid
  2. Security
  3. io.github.MCPShield-Dev/mcpshield
MCP server · Security

io.github.MCPShield-Dev/mcpshield

· github.com/MCPShield-Dev/mcpshield

Security scanner for MCP servers - detects tool poisoning and injection

Unclaimed security
InstallView source
37Low

Scored 6 months ago · breakdown

About io.github.MCPShield-Dev/mcpshield

io.github.MCPShield-Dev/mcpshield is an MCP server in the Security category: security scanner for MCP servers - detects tool poisoning and injection.

Install

Claude Code
claude mcp add io-github-mcpshield-dev-mcpshield -- npx -y mcpshield-cli
npx
npx -y mcpshield-cli

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.MCPShield-Dev/mcpshield

Powered by Claude · Grounded in docs

I know everything about io.github.MCPShield-Dev/mcpshield. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

MCPShield CLI

Scan MCP servers and GitHub repositories for security vulnerabilities.

Powered by MCPShield — the MCP security scanner with 59+ detection rules covering the OWASP MCP Top 10.

Install

npm install -g mcpshield

Setup

Get a free API key at mcpshield.co/settings, then:

mcpshield auth mcp_sk_your_key_here

Usage

# Scan an HTTP MCP server
mcpshield scan --url https://mcp-server.example.com/mcp

# Scan a GitHub repository
mcpshield scan --github https://github.com/user/repo

# JSON output (for CI/CD)
mcpshield scan --url https://mcp-server.example.com/mcp --json

# Filter by severity
mcpshield scan --url https://mcp-server.example.com/mcp --severity high

Exit Codes

  • 0 — Scan completed, no critical findings
  • 1 — Error (invalid key, rate limit, scan failure)
  • 2 — Scan completed with critical findings

Environment Variables

  • MCPSHIELD_API_KEY — API key (alternative to mcpshield auth)
  • MCPSHIELD_API_URL — Custom API endpoint (for self-hosted)

License

MIT

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.MCPShield-Dev/mcpshield

How do I install io.github.MCPShield-Dev/mcpshield?

Run claude mcp add io-github-mcpshield-dev-mcpshield -- npx -y mcpshield-cli, then add the server to your MCP client's configuration.

Is io.github.MCPShield-Dev/mcpshield safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.MCPShield-Dev/mcpshield still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.