Advertise
MCP.so
Sign In

MCP Shield

@riseandignite

Repository

Basic information

Category

Other

License

MIT

Transports

stdio

Author

riseandignite

About MCP Shield

Security scanner for MCP servers

MCP Shield config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-shield": {
      "command": "npx",
      "args": [
        "mcp-shield"
      ]
    }
  }
}

MCP Shield tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is MCP-Shield?

MCP-Shield scans your installed MCP (Model Context Protocol) servers and detects vulnerabilities such as tool poisoning attacks, data exfiltration channels, and cross-origin escalations. It is for developers and security teams who integrate MCP servers into AI workflows.

How to use MCP-Shield?

Run npx mcp-shield to scan standard MCP configuration locations. Use --path <path> to scan a specific config file, --claude-api-key <key> for enhanced AI analysis, --identify-as <client> to test client‑specific behavior, and --safe-list <servers> to exclude trusted servers. Run npx mcp-shield -h for full help.

Key features of MCP-Shield

  • Detects hidden instructions, exfiltration, and tool shadowing
  • Identifies sensitive file access attempts
  • Detects cross‑origin violations between servers
  • Supports Cursor, Claude Desktop, Windsurf, VSCode, Codeium configs
  • Optional Claude AI integration for deeper analysis
  • Safe‑list functionality to exclude trusted servers

Use cases of MCP-Shield

  • Scan new MCP servers before adding them to your environment
  • Regular security audits of your MCP configuration
  • Validate security during MCP server development
  • Verify no regression after updating MCP servers

Frequently asked questions

1

What vulnerability types does MCP-Shield detect?

It detects tool poisoning with hidden instructions, data exfiltration channels, tool shadowing and behavior modification, sensitive file access attempts, and cross‑origin violations between servers.

2

How do I use MCP-Shield with the Claude API?

Pass the `--claude-api-key YOUR_API_KEY` flag when running the scan. This enables AI‑powered analysis that provides detailed risk assessments and explanations for each detected vulnerability.

3

Can I scan a specific configuration file?

Yes, use the `--path <path>` option to point to a specific MCP config file (`.mcp/*.json` or `claude_desktop_config.json`). If omitted, MCP-Shield scans standard locations on your system.

4

Does MCP-Shield support a safe list?

Yes, use `--safe-list "server1,server2"` to exclude those servers from scanning and from cross‑origin violation detection.

5

What MCP client configurations does it support?

It supports Cursor, Claude Desktop, Windsurf, VSCode, and Codeium configuration files.

Comments

More Other MCP servers

Sequential Thinking

modelcontextprotocol

Model Context Protocol Servers

88.2K

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

Advertise