MCP Shield

@riseandignite

代码仓库

基本信息

分类

其他

许可证

MIT

传输方式

stdio

作者

riseandignite

关于 MCP Shield

Security scanner for MCP servers

MCP Shield 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-shield": {
      "command": "npx",
      "args": [
        "mcp-shield"
      ]
    }
  }
}

MCP Shield 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is MCP-Shield?

MCP-Shield scans your installed MCP (Model Context Protocol) servers and detects vulnerabilities such as tool poisoning attacks, data exfiltration channels, and cross-origin escalations. It is for developers and security teams who integrate MCP servers into AI workflows.

How to use MCP-Shield?

Run npx mcp-shield to scan standard MCP configuration locations. Use --path <path> to scan a specific config file, --claude-api-key <key> for enhanced AI analysis, --identify-as <client> to test client‑specific behavior, and --safe-list <servers> to exclude trusted servers. Run npx mcp-shield -h for full help.

Key features of MCP-Shield

Detects hidden instructions, exfiltration, and tool shadowing
Identifies sensitive file access attempts
Detects cross‑origin violations between servers
Supports Cursor, Claude Desktop, Windsurf, VSCode, Codeium configs
Optional Claude AI integration for deeper analysis
Safe‑list functionality to exclude trusted servers

Use cases of MCP-Shield

Scan new MCP servers before adding them to your environment
Regular security audits of your MCP configuration
Validate security during MCP server development
Verify no regression after updating MCP servers

常见问题

What vulnerability types does MCP-Shield detect?

It detects tool poisoning with hidden instructions, data exfiltration channels, tool shadowing and behavior modification, sensitive file access attempts, and cross‑origin violations between servers.

How do I use MCP-Shield with the Claude API?

Pass the `--claude-api-key YOUR_API_KEY` flag when running the scan. This enables AI‑powered analysis that provides detailed risk assessments and explanations for each detected vulnerability.

Can I scan a specific configuration file?

Yes, use the `--path <path>` option to point to a specific MCP config file (`.mcp/*.json` or `claude_desktop_config.json`). If omitted, MCP-Shield scans standard locations on your system.

Does MCP-Shield support a safe list?

Yes, use `--safe-list "server1,server2"` to exclude those servers from scanning and from cross‑origin violation detection.

What MCP client configurations does it support?

It supports Cursor, Claude Desktop, Windsurf, VSCode, and Codeium configuration files.

其他分类下的更多 MCP 服务器

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep

FastMCP v2 🚀

jlowin

🚀 The fast, Pythonic way to build MCP servers and clients.

26.0K

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40