1. Conduid
  2. Security
  3. io.github.MCPShield-Dev/mcpshield
MCP server · Security

io.github.MCPShield-Dev/mcpshield

· github.com/MCPShield-Dev/mcpshield

Security scanner for MCP servers - detects tool poisoning and injection

Unclaimed security
InstallView source
37Low

Scored 4 months ago · breakdown

About io.github.MCPShield-Dev/mcpshield

io.github.MCPShield-Dev/mcpshield is an MCP server in the Security category: security scanner for MCP servers - detects tool poisoning and injection. It has been installed 0 times through Conduid.

Install

Claude Code
claude mcp add io-github-mcpshield-dev-mcpshield -- npx -y mcpshield-cli
npx
npx -y mcpshield-cli

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.MCPShield-Dev/mcpshield

Powered by Claude · Grounded in docs

I know everything about io.github.MCPShield-Dev/mcpshield. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.

README

MCPShield CLI

Scan MCP servers and GitHub repositories for security vulnerabilities.

Powered by MCPShield — the MCP security scanner with 59+ detection rules covering the OWASP MCP Top 10.

Install

npm install -g mcpshield

Setup

Get a free API key at mcpshield.co/settings, then:

mcpshield auth mcp_sk_your_key_here

Usage

# Scan an HTTP MCP server
mcpshield scan --url https://mcp-server.example.com/mcp

# Scan a GitHub repository
mcpshield scan --github https://github.com/user/repo

# JSON output (for CI/CD)
mcpshield scan --url https://mcp-server.example.com/mcp --json

# Filter by severity
mcpshield scan --url https://mcp-server.example.com/mcp --severity high

Exit Codes

  • 0 — Scan completed, no critical findings
  • 1 — Error (invalid key, rate limit, scan failure)
  • 2 — Scan completed with critical findings

Environment Variables

  • MCPSHIELD_API_KEY — API key (alternative to mcpshield auth)
  • MCPSHIELD_API_URL — Custom API endpoint (for self-hosted)

License

MIT

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About io.github.MCPShield-Dev/mcpshield

How do I install io.github.MCPShield-Dev/mcpshield?

Run claude mcp add io-github-mcpshield-dev-mcpshield -- npx -y mcpshield-cli, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is io.github.MCPShield-Dev/mcpshield safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.MCPShield-Dev/mcpshield still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.