English Français العربية

io.github.MCPShield-Dev/mcpshield

Official registry Security

Security scanner for MCP servers - detects tool poisoning and injection

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package mcpshield-cli
Claude Code 
claude mcp add mcpshield -- npx -y mcpshield-cli@2.0.2
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcpshield": {
            "command": "npx",
            "args": [
                "-y",
                "mcpshield-cli@2.0.2"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. MCPShield CLI
  2. Install
  3. Setup
  4. Usage
  5. Exit Codes
  6. Environment Variables
  7. License

MCPShield CLI

Scan MCP servers and GitHub repositories for security vulnerabilities.

Powered by MCPShield — the MCP security scanner with 59+ detection rules covering the OWASP MCP Top 10.

Install

npm install -g mcpshield

Setup

Get a free API key at mcpshield.co/settings, then:

mcpshield auth mcp_sk_your_key_here

Usage

# Scan an HTTP MCP server
mcpshield scan --url https://mcp-server.example.com/mcp

# Scan a GitHub repository
mcpshield scan --github https://github.com/user/repo

# JSON output (for CI/CD)
mcpshield scan --url https://mcp-server.example.com/mcp --json

# Filter by severity
mcpshield scan --url https://mcp-server.example.com/mcp --severity high

Exit Codes

  • 0 — Scan completed, no critical findings
  • 1 — Error (invalid key, rate limit, scan failure)
  • 2 — Scan completed with critical findings

Environment Variables

  • MCPSHIELD_API_KEY — API key (alternative to mcpshield auth)
  • MCPSHIELD_API_URL — Custom API endpoint (for self-hosted)

License

MIT

Frequently asked questions

What is io.github.MCPShield-Dev/mcpshield?

Security scanner for MCP servers - detects tool poisoning and injection

How do I install io.github.MCPShield-Dev/mcpshield?

It runs on your machine. In Claude Code: claude mcp add mcpshield -- npx -y mcpshield-cli@2.0.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.MCPShield-Dev/mcpshield need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.MCPShield-Dev/mcpshield open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.MCPShield-Dev/mcpshield?

It is published by MCPShield-Dev. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.