広告掲載
MCP.so
ログイン

MCP Shield

@riseandignite

リポジトリ

基本情報

カテゴリ

その他

ライセンス

MIT

トランスポート

stdio

作者

riseandignite

MCP Shield について

Security scanner for MCP servers

MCP Shield の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-shield": {
      "command": "npx",
      "args": [
        "mcp-shield"
      ]
    }
  }
}

MCP Shield のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is MCP-Shield?

MCP-Shield scans your installed MCP (Model Context Protocol) servers and detects vulnerabilities such as tool poisoning attacks, data exfiltration channels, and cross-origin escalations. It is for developers and security teams who integrate MCP servers into AI workflows.

How to use MCP-Shield?

Run npx mcp-shield to scan standard MCP configuration locations. Use --path <path> to scan a specific config file, --claude-api-key <key> for enhanced AI analysis, --identify-as <client> to test client‑specific behavior, and --safe-list <servers> to exclude trusted servers. Run npx mcp-shield -h for full help.

Key features of MCP-Shield

  • Detects hidden instructions, exfiltration, and tool shadowing
  • Identifies sensitive file access attempts
  • Detects cross‑origin violations between servers
  • Supports Cursor, Claude Desktop, Windsurf, VSCode, Codeium configs
  • Optional Claude AI integration for deeper analysis
  • Safe‑list functionality to exclude trusted servers

Use cases of MCP-Shield

  • Scan new MCP servers before adding them to your environment
  • Regular security audits of your MCP configuration
  • Validate security during MCP server development
  • Verify no regression after updating MCP servers

よくある質問

1

What vulnerability types does MCP-Shield detect?

It detects tool poisoning with hidden instructions, data exfiltration channels, tool shadowing and behavior modification, sensitive file access attempts, and cross‑origin violations between servers.

2

How do I use MCP-Shield with the Claude API?

Pass the `--claude-api-key YOUR_API_KEY` flag when running the scan. This enables AI‑powered analysis that provides detailed risk assessments and explanations for each detected vulnerability.

3

Can I scan a specific configuration file?

Yes, use the `--path <path>` option to point to a specific MCP config file (`.mcp/*.json` or `claude_desktop_config.json`). If omitted, MCP-Shield scans standard locations on your system.

4

Does MCP-Shield support a safe list?

Yes, use `--safe-list "server1,server2"` to exclude those servers from scanning and from cross‑origin violation detection.

5

What MCP client configurations does it support?

It supports Cursor, Claude Desktop, Windsurf, VSCode, and Codeium configuration files.

コメント

「その他」の他のコンテンツ

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K
P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Awesome Mlops

visenger

A curated list of references for MLOps

14.0K

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

広告掲載